Skip to content

v0.0.133

# NemoClaw v0.0.133 release brief
@rsliter rsliter tagged this 12 Oct 21:56 
## Release range

- Previous release: `v0.0.132` at `95d6505265ba1f2cb05355f83786353e654de096`
- Candidate: `ef5d55d19e2da33c2474db158588613828e1a9be`
- Candidate selection: current-main
- Commits: 29
- Risky files detected: 226

## QA context

### Risky areas

- Workflow / enforcement
- Credentials / inference
- Sandbox / policy / SSRF
- Installer / bootstrap
- Onboarding / host glue

### Suggested test focus

- Fresh install and upgrade paths
- Onboarding wizard and sandbox creation
- Policy enforcement, network egress, and SSRF protections
- CI checks, pre-commit hooks, and DCO declarations
- Credential storage and inference provider routing

## Canonical release entry

- Path: `docs/changelog/2026-10-12.mdx`
- Entry:

## v0.0.133

NemoClaw v0.0.133 extends sandbox-attached OpenShell inference to supported hosted providers and improves recovery when sandbox or gateway state is incomplete.
It also makes policy removal, provider verification, and configuration export more predictable.

- New OpenAI, Anthropic, Google Gemini, OpenRouter, and Hermes Provider selections use sandbox-attached OpenShell providers.
  Provider credentials stay on the host, and each sandbox records its own attachment.
  Existing sandboxes without a native attachment retain their recorded shared route.
  Related change: [PR #12886](https://github.com/NVIDIA/NemoClaw/pull/12886).
  Refer to [How Inference Routing Works](/user-guide/openclaw/inference/about-inference-routing).
- A fresh managed OpenClaw sandbox using local Ollama or vLLM defaults to direct tool disclosure when no mode is selected.
  An explicit selection or existing sandbox state takes precedence.
  Related change: [PR #12968](https://github.com/NVIDIA/NemoClaw/pull/12968).
  Refer to [Progressive Tool Disclosure](/user-guide/openclaw/configure-agents/progressive-tool-disclosure).
- Provider creation and attachment warn when a previously verified profile changes or its follow-up check cannot complete.
  The successful operation remains successful; ask the gateway operator to inspect the profile before relying on its credential boundary.
  The advisory lookup follows the caller's timeout, capped at 30 seconds.
  Related changes: [PR #12985](https://github.com/NVIDIA/NemoClaw/pull/12985) and [PR #13033](https://github.com/NVIDIA/NemoClaw/pull/13033).
- Policy preset removal accepts OpenShell's provider-composed `_provider_*` readback entries but still rejects missing or changed operator-owned rules.
  Related change: [PR #12983](https://github.com/NVIDIA/NemoClaw/pull/12983).
  Refer to [Apply Policy Presets](/user-guide/openclaw/network-policy/configure-policies/apply-policy-presets).
- Native-home backup removes a new backup directory when capture throws.
  If cleanup also fails, the error identifies the retained incomplete path for inspection.
  Related change: [PR #13010](https://github.com/NVIDIA/NemoClaw/pull/13010).
  Refer to [Back Up and Restore Sandboxes](/user-guide/openclaw/manage-sandboxes/state-and-backups/create-and-restore-snapshots).
- After failed onboarding leaves an identity-free recovery reservation, `nemoclaw <name> destroy --yes` can release the name when the selected gateway and Docker confirm that the sandbox is absent.
  Ownership conflicts and uncertain absence still block removal.
  Related change: [PR #12839](https://github.com/NVIDIA/NemoClaw/pull/12839).
- Gateway recovery retains the last successful state-directory and Docker-network binding for each port.
  Process identity checks also handle a live sibling of a zombie leader and large inherited environments without dropping ownership checks.
  Related changes: [PR #12800](https://github.com/NVIDIA/NemoClaw/pull/12800) and [PR #12928](https://github.com/NVIDIA/NemoClaw/pull/12928).
- `nemoclaw config export` accepts sandboxes with an empty messaging plan.
  Deep Agents Code `sessions` and `sessions list` instead report that listing is unsupported and exit with code 1.
  Related changes: [PR #13021](https://github.com/NVIDIA/NemoClaw/pull/13021) and [PR #12918](https://github.com/NVIDIA/NemoClaw/pull/12918).
- Native Linux ARM64 can recognize a qualified N1x PCI identity without the FastOS marker.
  Physical qualification remains pending.
  Related change: [PR #12768](https://github.com/NVIDIA/NemoClaw/pull/12768).
- QA runs can select the fixed TEST receiver with `NEMOCLAW_TELEMETRY_TEST_LABEL`.
  NemoClaw attempts one completion record for each covered installer or CLI operation.
  Collection and delivery share a five-second total limit, and `NEMOCLAW_DISABLE_TELEMETRY=1` suppresses both.
  Production delivery is not enabled.
  Related change: [PR #12859](https://github.com/NVIDIA/NemoClaw/pull/12859).
  Refer to [QA Operation Telemetry](/user-guide/openclaw/security/best-practices#qa-operation-telemetry).

## Documentation coverage

- Latest included cumulative docs PR: [#12988](https://github.com/NVIDIA/NemoClaw/pull/12988)
- Final PR commit and merge commit: `8ba52338ecd8a40bb899a8ca0adaf6a08b024740`, `ef5d55d19e2da33c2474db158588613828e1a9be`
- Final automated refresh coverage commit: `6cf6f067d1f4d93280911a475e5af48ce71608b2` (verified catch-up commit `28cbdcb54ce5c705f4fff39580069bc889c031d1` has this as its second parent)
- Later commits and merged PRs: only `ef5d55d19e2da33c2474db158588613828e1a9be`, the merge of [#12988](https://github.com/NVIDIA/NemoClaw/pull/12988); no later product merge in the planned candidate
- Changed paths: `docs/changelog/2026-10-12.mdx`, `docs/configure-agents/progressive-tool-disclosure.mdx`, `docs/manage-sandboxes/backup-restore.mdx`, `docs/network-policy/apply-policy-presets.mdx`, `docs/reference/commands.mdx`; all under `docs/**`
- Review and checks: `APPROVED`; latest-head required checks passed and no checks remain pending. Earlier cancelled commit-lint attempt was superseded by successful runs. The [Advisor gate](https://github.com/NVIDIA/NemoClaw/actions/runs/38310758234) failed on three false positives; [maintainer disposition](https://github.com/NVIDIA/NemoClaw/pull/12988#issuecomment-6133033753) and approved review record the source/test evidence. All nine specialists recommended no additional PR E2E selector.
- Open managed docs PRs: none at candidate selection
- Maintainer decision: Proceed with the candidate as shown.

## Base and managed image evidence

- Base-image candidate: `ef5d55d19e2da33c2474db158588613828e1a9be`
- Evidence: [candidate `main` push E2E workflow, run 38312255400 attempt 1](https://github.com/NVIDIA/NemoClaw/actions/runs/38312255400); [successful `base-image-publication` job](https://github.com/NVIDIA/NemoClaw/actions/runs/38312255400/job/115022794120), completed `2026-10-12T21:50:25Z`. The job verified applicable GHCR base and managed-image publication and immutable Deep Agents Code base for the exact candidate SHA.

## General E2E decision

- Latest identifiable full manual main run: [attempt 1, run 38290099089](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/attempts/1).
- Tested commit: `e15557e12bdd3200a8fc05d9930b3363afdc5c94`; planned candidate: `ef5d55d19e2da33c2474db158588613828e1a9be` (different commit).
- Created: `2026-10-12T18:19:11Z`; started: `2026-10-12T18:19:11Z`; last updated: `2026-10-12T19:40:49Z`; age at 2026-10-12T21:47:04Z: 3h 27m.
- Workflow status/conclusion: `completed` / `failure`.
- Subsequent smaller-scope `main` push Relevant E2E aggregates passed: [run 38291940903 at `844d24a8`](https://github.com/NVIDIA/NemoClaw/actions/runs/38291940903/job/114970656729), [run 38305846527 at `8f7a5ff7`](https://github.com/NVIDIA/NemoClaw/actions/runs/38305846527/job/115019075087), and [run 38306408299 at `6cf6f067`](https://github.com/NVIDIA/NemoClaw/actions/runs/38306408299/job/115021926686), and [candidate run 38312255400 at `ef5d55d1`](https://github.com/NVIDIA/NemoClaw/actions/runs/38312255400/job/115024681170). These selected runs do not resolve the earlier full-run Hermes and protected GPU failures or provide a full result for the candidate.
- [Release qualification](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114977557034): `completed` / `failure`, 2026-10-12T19:40:11Z to 2026-10-12T19:40:19Z.
- Failure: [Hermes E2E (docker)](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114959735934).
- Failure: [Messaging: isolates Hermes Slack credentials and reaches Slack APIs (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114959739022).
- Failure: [Inference: Hermes switches to native NVIDIA and remains responsive (docker) / NVIDIA API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114959739513).
- Failure: [Messaging: Hermes preserves channels across stop and start (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114959740182).
- Failure: [Security: Hermes retains the required sandbox posture (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114959740568).
- Failure: [Protected managed-image GPU and local inference](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114967404868).
- Skipped: [native-runtime-qualification-producer-plan](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114948341707).
- Skipped: [openshell-dev-artifact](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114948342118).
- Skipped: [Build pinned Portable Podman 5.7 toolchain](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114948342483).
- Skipped: [Exact staging Brev Launchable identity](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114948342494).
- Skipped: [external-gateway-health](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114948342512).
- Skipped: [Portable Hermes finalization (Podman 5.7, NVIDIA GPU)](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114948342964).
- Skipped: [Build pinned native Podman toolchain / ${{ matrix.architecture }}](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114948343015).
- Skipped: [matrix.jobName](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114948343404).
- Skipped: [Aggregate native runtime qualification evidence](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114948344306).
- Skipped: [${{ matrix.display_name }} (${{ matrix.runtime_provider }})](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114959736692).
- Skipped: [dgx-station-express](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114959737108).
- Skipped: [MCP bridge dev (${{ matrix.agent }}, ${{ matrix.runtime_provider }})](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114959737327).
- Skipped: [jetson-nvmap-gpu](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114959738052).
- Skipped: [Relevant E2E](https://github.com/NVIDIA/NemoClaw/actions/runs/38290099089/job/114977558747).
- Candidate [main-push E2E run 38312255400](https://github.com/NVIDIA/NemoClaw/actions/runs/38312255400) completed `success` at `2026-10-12T21:55:09Z`; [Relevant E2E](https://github.com/NVIDIA/NemoClaw/actions/runs/38312255400/job/115024681170) and [jetson-nvmap-gpu](https://github.com/NVIDIA/NemoClaw/actions/runs/38312255400/job/115023298093) passed. This selected push run is not a full manual release-qualification run.
- No requested focused or full rerun yet.
- Maintainer E2E choice: Proceed with the status as shown.

Exceptions: The maintainer is proceeding while stability work continues because four subsequent smaller-scope main-push Relevant E2E aggregates passed, including the exact candidate and its Jetson job. The newest full suite failed on older commit `e15557e12bdd3200a8fc05d9930b3363afdc5c94`; its Hermes and protected GPU failures remain unverified by a successful full run on candidate `ef5d55d19e2da33c2474db158588613828e1a9be`.
Assets 2
Loading