Skip to content

v0.0.141

# NemoClaw v0.0.141 release brief
@rsliter rsliter tagged this 04 Nov 00:46 
## Release range

- Previous release: `v0.0.140` at `88fe14f3fb9a0bf72997cce19ec88b5b2ee08391`
- Candidate: `b7dcc9bb76197fb28ec673867c35974ac799eb15`
- Candidate selection: current-main
- Commits: 37
- Risky files detected: 137

## QA context

### Risky areas

- Workflow / enforcement
- Sandbox / policy / SSRF
- Installer / bootstrap
- Credentials / inference
- Onboarding / host glue

### Suggested test focus

- Fresh install and upgrade paths
- Onboarding wizard and sandbox creation
- Policy enforcement, network egress, and SSRF protections
- CI checks, pre-commit hooks, and DCO declarations
- Credential storage and inference provider routing

## Canonical release entry

- Path: `docs/changelog/2026-11-03.mdx`
- Entry:

## v0.0.141

NemoClaw v0.0.141 adds adaptive routing configuration for managed Hermes and improves sandbox recovery, inference validation, and credential handling.
Eligible installer and CLI operations now send operation telemetry to NVIDIA's Production receiver by default.

### Hermes and Inference

- Managed Hermes onboarding accepts `--switchyard-config <file>` to generate routing configuration for efficient and capable hosted models.
  The capable target is also configured as the classifier.
  Provider credential attachment for the routed targets remains tracked in [issue #13863](https://github.com/NVIDIA/NemoClaw/issues/13863); this configuration does not establish production routing.
  Targets must use approved fixed hosted providers and different model IDs; Portable and custom images are not supported.
  Refer to the [onboarding command reference](/user-guide/hermes/reference/commands#--switchyard-config-file).
  Related change: [PR #13982](https://github.com/NVIDIA/NemoClaw/pull/13982).
- Native inference recreation defers the source sandbox's route reservation until after its backup succeeds, avoiding a conflict with its own registry entry.
  Related change: [PR #13844](https://github.com/NVIDIA/NemoClaw/pull/13844).
- Custom inference endpoint setup and switching refuse conflicting network policy rules before changing the provider or route.
  Compatible-endpoint onboarding probes every resolved IPv4 and IPv6 address to confirm direct host inference is unavailable.
  Related changes: [PR #13927](https://github.com/NVIDIA/NemoClaw/pull/13927) and [PR #13767](https://github.com/NVIDIA/NemoClaw/pull/13767).
- Managed vLLM startup failures include available log excerpts from before the latest container restart as well as the current log tail.
  Related change: [PR #14045](https://github.com/NVIDIA/NemoClaw/pull/14045).
- OpenClaw web-research guidance requires the agent to disclose unavailable search and avoid presenting unverified results as current research.
  Related change: [PR #13607](https://github.com/NVIDIA/NemoClaw/pull/13607).

### Sandbox Recovery

- Rebuild refuses a retained recovery journal while the original source sandbox still exists or its identity cannot be established.
  Early rebuild preflight failures also identify that the rebuild stopped before replacement.
  Related changes: [PR #14113](https://github.com/NVIDIA/NemoClaw/pull/14113) and [PR #14058](https://github.com/NVIDIA/NemoClaw/pull/14058).
- Hermes rebuild archives preserve verified native NVIDIA credential references in supported configuration fields while continuing to remove raw credentials.
  Related change: [PR #14030](https://github.com/NVIDIA/NemoClaw/pull/14030).
- Lifecycle commands detect native `openshell sandbox connect` sessions as well as sessions started through NemoClaw.
  Destroy and rebuild warn before interrupting detected active sessions, including when confirmation is skipped.
  Related change: [PR #14000](https://github.com/NVIDIA/NemoClaw/pull/14000).
- OpenClaw `start` waits for the agent gateway after Docker recovery and checks inference before reporting readiness.
  Related change: [PR #14006](https://github.com/NVIDIA/NemoClaw/pull/14006).
- On macOS, NemoClaw passes the selected Colima Docker socket to OpenShell.
  Connect timeouts identify a foreign container when container identity prevents NemoClaw from matching the sandbox.
  Related changes: [PR #13906](https://github.com/NVIDIA/NemoClaw/pull/13906) and [PR #13672](https://github.com/NVIDIA/NemoClaw/pull/13672).

### Security and Credentials

- Auxiliary agent forwards bind to loopback.
  If NemoClaw cannot prove ownership of a legacy wildcard forward, it refuses migration and leaves that listener unchanged; it can remain remotely reachable.
  Related change: [PR #13515](https://github.com/NVIDIA/NemoClaw/pull/13515).
- Removing the Tavily preset revokes its provider endpoint grants as well as the sandbox network rules.
  Related change: [PR #13662](https://github.com/NVIDIA/NemoClaw/pull/13662).
- Discord enrollment verifies authentication through the selected agent runtime, including the managed Hermes Discord path.
  Related change: [PR #13873](https://github.com/NVIDIA/NemoClaw/pull/13873).
- Managed runtime dependencies include reviewed vulnerability remediations for affected npm packages.
  Related change: [PR #14096](https://github.com/NVIDIA/NemoClaw/pull/14096).
- Hermes permits read-only Direct Rendering Manager (DRM) metadata discovery without granting access to GPU device nodes.
  Related change: [PR #14027](https://github.com/NVIDIA/NemoClaw/pull/14027).

### Operation Telemetry and Diagnostics

- Eligible installer and supported CLI operations attempt to send completed-operation telemetry to NVIDIA's fixed Production receiver by default.
  Set `NEMOCLAW_DISABLE_TELEMETRY=1` in each shell before installation or CLI use to disable collection and delivery.
  Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for collected fields and exclusions.
  Related change: [PR #14106](https://github.com/NVIDIA/NemoClaw/pull/14106).
- Untagged Classic builds report version `0.0.0` instead of `0.1.0`.
  Tagged releases retain their release version.
  Related change: [PR #14108](https://github.com/NVIDIA/NemoClaw/pull/14108).
- Configuration export explains unsupported image input, strict backup explains why the unreachable-sandbox opt-in does not apply, and `providers_v2` refusal messages put the recovery command on its own line.
  Related changes: [PR #13789](https://github.com/NVIDIA/NemoClaw/pull/13789), [PR #13791](https://github.com/NVIDIA/NemoClaw/pull/13791), and [PR #13812](https://github.com/NVIDIA/NemoClaw/pull/13812).

## Documentation coverage

- Latest included cumulative docs PR: [#13774](https://github.com/NVIDIA/NemoClaw/pull/13774), merged.
- Final PR commit: `97f4026c73d913b41a0310eecc67ca468f88029d`.
- Merge commit: `b7dcc9bb76197fb28ec673867c35974ac799eb15`.
- Final automated refresh coverage commit: `5d463e0bc1c2d625abc823c10137fb738ecf198a`.
- Changed paths: `docs/changelog/2026-11-03.mdx`, `docs/reference/commands.mdx`. Both are allowed documentation paths.
- Review: retained human approval from prekshivyas; independent documentation review passed at the final PR commit. All nine Advisor specialists and the workflow passed. No deterministic or additional E2E selectors required. CodeRabbit skipped this bot-authored PR.
- Checks: trusted gate passed all 35 current checks before merge; all 38 commits verified. Raw check history below retains legitimate skips and superseded cancelled runs.
- Open managed docs PRs: none at inspection.
- Manual coverage supplement: the independent documentation review audited the v0.0.140 release range through `c49b2f6e517c8682234bfb9b077ad210d963b2e0`. This does not replace the formal automated coverage point.
- Additional uncovered product merge: [#14136](https://github.com/NVIDIA/NemoClaw/pull/14136) requires HTTP 200 and a JSON model-list data array for local vLLM/NIM health, and a running container for recorded NIM containers. It merged after manual documentation review and is not explicitly described in the v0.0.141 entry.
- Maintainer decision: Proceed with the candidate as shown.

### Commits after the final automated refresh

This range includes eight commits at or before v0.0.140, the 36 subsequent product/documentation commits, and the final #13774 docs merge. Every other merge follows the automated refresh; the manual review supplement is described above.

| Commit | Merged PR |
| --- | --- |
| `b7dcc9bb76197fb28ec673867c35974ac799eb15` | [13774: docs: prepare v0.0.141 release documentation](https://github.com/NVIDIA/NemoClaw/pull/13774) |
| `8893b9f442a323f65d8847606c0b70f4a7debab9` | [14136: fix(inference): require HTTP 200 model lists for local health](https://github.com/NVIDIA/NemoClaw/pull/14136) |
| `c49b2f6e517c8682234bfb9b077ad210d963b2e0` | [14150: test(e2e): ask for a JSON-only unavailable search reply](https://github.com/NVIDIA/NemoClaw/pull/14150) |
| `537fcf0a5e569d438294e779cb954963d6a5458a` | [14106: fix(telemetry): send eligible client events to production](https://github.com/NVIDIA/NemoClaw/pull/14106) |
| `75f0b056792f396b4ad1649e3c43a2fc5a5c0a64` | [14149: fix(e2e): verify native plugin tools through agent execution](https://github.com/NVIDIA/NemoClaw/pull/14149) |
| `fc7d02e4a4d0dbf01c6aee55e07dfbf0625e324e` | [14109: ci(e2e): allow 90 minutes for protected GPU qualification](https://github.com/NVIDIA/NemoClaw/pull/14109) |
| `997d5748a4055e8465e4d1d191ef549a605cb72e` | [14113: fix(rebuild): refuse stale recovery while source survives](https://github.com/NVIDIA/NemoClaw/pull/14113) |
| `da258c0cce4a7cfa2836c717e2da98075c8d5487` | [14096: fix(deps): remediate reported runtime vulnerabilities](https://github.com/NVIDIA/NemoClaw/pull/14096) |
| `9768c5a4001da5d971c373df78f4954e2f4e3993` | [14034: docs(vllm): drop rejected flag from extra args example](https://github.com/NVIDIA/NemoClaw/pull/14034) |
| `1d20fe89a035a115924b261bb5c3e459affe6683` | [14108: fix(packaging): report untagged Classic builds as 0.0.0](https://github.com/NVIDIA/NemoClaw/pull/14108) |
| `ceb14dcc997b5a33ecabe7a521c1d19c9c4d8c30` | [14114: test(onboarding): trace Pi lifecycle phases and honor WSL timeout](https://github.com/NVIDIA/NemoClaw/pull/14114) |
| `2d25e02963954a3774852dc44905c186ed4d11ab` | [13607: fix(openclaw): ground web research in search availability (#13594)](https://github.com/NVIDIA/NemoClaw/pull/13607) |
| `0718fd7620c6fe770f2e0e3ea7a09b408fd79b2a` | [14030: fix(state): preserve Hermes NVIDIA references in rebuild archives](https://github.com/NVIDIA/NemoClaw/pull/14030) |
| `6c763341b71c9d82b577c5ed1a9c8ffe57725c6e` | [14000: fix(sandbox): detect native OpenShell connect sessions](https://github.com/NVIDIA/NemoClaw/pull/14000) |
| `30b8b9ccb59dd44c8f427b18ad8624c17eb4d098` | [13949: fix(skills): inspect session records before reporting gaps](https://github.com/NVIDIA/NemoClaw/pull/13949) |
| `5a8515d7ce9feee4c0245cc6f3e2ed9b69b6a1f8` | [13982: feat(hermes): add adaptive Switchyard onboarding](https://github.com/NVIDIA/NemoClaw/pull/13982) |
| `8a24149de8ad15251b0f67319b0f7711cba17a1a` | [14062: fix(e2e): keep Ollama cleanup out of login shells](https://github.com/NVIDIA/NemoClaw/pull/14062) |
| `f3abeb5d604de2ca44fca6c68c40b835a96ac09e` | [13868: docs: consolidate daily documentation audit fixes](https://github.com/NVIDIA/NemoClaw/pull/13868) |
| `80e4cd940ed028b43f537d5d7ab639acd8d95065` | [14058: fix(rebuild): frame early preflight stops (Fixes #13808)](https://github.com/NVIDIA/NemoClaw/pull/14058) |
| `2007b135384648b897dd4ebbf71e65faee25f360` | [14049: docs(mcp): explain proxy-hidden private CA failures (Fixes #13905)](https://github.com/NVIDIA/NemoClaw/pull/14049) |
| `97c8fb760565053bb8399eb8994bfb1dd464bd12` | [14006: fix(sandbox): wait for OpenClaw after Docker recovery](https://github.com/NVIDIA/NemoClaw/pull/14006) |
| `a68a9467590bf1f64eccbcad310028e15f48218f` | [13844: fix(onboard): stop native recreate conflicting with its own source](https://github.com/NVIDIA/NemoClaw/pull/13844) |
| `24d29d47c764a71abd1e655df936cef5d145b8f4` | [13906: fix(platform): pass the selected Colima socket to OpenShell](https://github.com/NVIDIA/NemoClaw/pull/13906) |
| `cf30477d78bdc75fd3b5538d4938dfe677658d60` | [14041: fix(e2e): classify HTTP failures and reuse protected OpenClaw images](https://github.com/NVIDIA/NemoClaw/pull/14041) |
| `0f8e14610f39e0abf7b7fc5d0fbb2c0993ab9db6` | [14045: fix(inference): retain vLLM startup errors (Fixes #14017)](https://github.com/NVIDIA/NemoClaw/pull/14045) |
| `82a1a8f9cb263b6fecdb508e407c5f84f72fd685` | [14025: test(e2e): keep the Tavily check credential-free in hosted CI (#13082)](https://github.com/NVIDIA/NemoClaw/pull/14025) |
| `444ce08acf2aa036060448357a0e36cfc6eb7b23` | [13927: fix(inference): refuse custom endpoint policy conflicts (Fixes #13904)](https://github.com/NVIDIA/NemoClaw/pull/13927) |
| `ca17fb312f506d8f8b2b4c06af0c908718786431` | [13672: fix(cli): name foreign container on connect timeout](https://github.com/NVIDIA/NemoClaw/pull/13672) |
| `85a3a8b29146e1e2e03a76a57ede184aa8231aa8` | [13515: fix(onboard): keep auxiliary agent forwards on loopback](https://github.com/NVIDIA/NemoClaw/pull/13515) |
| `81fe4746e00d66c4ffc28dccda1d9931458d536b` | [14027: fix(hermes): allow read-only DRM metadata discovery](https://github.com/NVIDIA/NemoClaw/pull/14027) |
| `f0be87d73f43338b99e12b1530c9317cf407d534` | [13997: test(e2e): capture failed fetch and forward restart evidence](https://github.com/NVIDIA/NemoClaw/pull/13997) |
| `ab35d305b661d781ac8f55d0674c2ba8ea783fcd` | [13873: fix(discord): verify enrollment and Hermes authentication (Fixes #13809)](https://github.com/NVIDIA/NemoClaw/pull/13873) |
| `a2fc9519947398f7a76288063aa5ff390d254a63` | [13662: fix(policy): revoke Tavily grants on preset removal (Fixes #13082)](https://github.com/NVIDIA/NemoClaw/pull/13662) |
| `4ec4ec634e5e9cf5f00c6bb2d2786a5b5b73eef9` | [13767: fix(onboard): verify dual-stack inference and accept maintainer reports](https://github.com/NVIDIA/NemoClaw/pull/13767) |
| `2c59513f6f37386c246904f1b19f7df83ebbbd16` | [13791: fix(backup): explain that strict backup ignores the unreachable opt-in](https://github.com/NVIDIA/NemoClaw/pull/13791) |
| `de00977585d04f3bac7b090a0870b0d2dca4972d` | [13812: fix(onboard): print the providers_v2 refusal command on its own line](https://github.com/NVIDIA/NemoClaw/pull/13812) |
| `de9c59af0dd60d8c8b32cb32ca01ef81440f047a` | [13789: fix(config): explain unsupported image input during export](https://github.com/NVIDIA/NemoClaw/pull/13789) |
| `88fe14f3fb9a0bf72997cce19ec88b5b2ee08391` | [14001: docs(changelog): note CI telemetry in v0.0.140](https://github.com/NVIDIA/NemoClaw/pull/14001) |
| `f12cc4806a780b6a29748896356cabd857cf6631` | [13742: fix(onboard): reuse a Ready sandbox on resume instead of recreating it for reasoning drift (#13732)](https://github.com/NVIDIA/NemoClaw/pull/13742) |
| `287ebd82eb52b9b796ac0bbb134ab06b5fa72bc2` | [13770: fix(telemetry): identify CI operation records](https://github.com/NVIDIA/NemoClaw/pull/13770) |
| `e677f436a8f1ada047c0fa76bdd37bcac58af244` | [13998: docs: correct v0.0.140 installer lookup guidance](https://github.com/NVIDIA/NemoClaw/pull/13998) |
| `51b14d3650f9022e9f95e25cd5559b916256660b` | [13993: docs: prepare v0.0.140 documentation](https://github.com/NVIDIA/NemoClaw/pull/13993) |
| `18378d10eae0cc3ea5dd503fd9c73595b073e209` | [13686: ci(e2e): retain portable Hermes failure diagnostics and cleanup](https://github.com/NVIDIA/NemoClaw/pull/13686) |
| `015f5f703d2b6940c90cea2a42cdeafab47803f8` | [13984: test(e2e): set isolated HOME for native credential rejection](https://github.com/NVIDIA/NemoClaw/pull/13984) |
| `b10117ecdf3318da48e882362d971dce6879750c` | [13629: fix(rebuild): scope the Hermes API port to each rebuild](https://github.com/NVIDIA/NemoClaw/pull/13629) |

### Documentation PR check history

| Check | State | Evidence |
| --- | --- | --- |
| commit-lint | CANCELLED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501385/job/126256613812) |
| require-maintainer-edits | CANCELLED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733496268/job/126256599730) |
| dco-check | CANCELLED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501463/job/126256613266) |
| request | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733489819/job/126256621628) |
| changes | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256860428) |
| assign-linked-issue-author | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733574490/job/126256861275) |
| assign-linked-issue-author | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41741216129/job/126282907355) |
| label-release-target | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41742123995/job/126285963397) |
| changes | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126256614864) |
| Analyze (javascript-typescript) | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733491687/job/126256587660) |
| Docs / Validate and publish PR preview | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501473/job/126256613911) |
| Docs / Verify CLI and installer reference parity | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501487/job/126256614054) |
| codebase-growth-guardrails | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733496109/job/126256598996) |
| codebase-growth-guardrails | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733574174/job/126256860058) |
| codebase-growth-guardrails | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41741216200/job/126282906992) |
| commit-lint | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573488/job/126256860495) |
| require-maintainer-edits | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733574141/job/126256864793) |
| require-maintainer-edits | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41741216081/job/126282907482) |
| dco-check | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573563/job/126256860008) |
| candidate-upgrade-admission | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733496199/job/126256599622) |
| candidate-upgrade-admission | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733574238/job/126256861773) |
| candidate-upgrade-admission | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41741216067/job/126282906190) |
| CodeQL (javascript-typescript) | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501386/job/126256617904) |
| check-hash | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501389/job/126256613998) |
| check-hash | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573752/job/126256857697) |
| Analyze (python) | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733491687/job/126256587982) |
| CodeQL (python) | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501386/job/126256617967) |
| docs-only-checks | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256913048) |
| docs-only-checks | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126259873564) |
| candidate-sdk-package | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733496199/job/126259309782) |
| candidate-sdk-package | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733574238/job/126267034473) |
| candidate-sdk-package | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41741216067/job/126283888057) |
| ShellCheck SARIF | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501386/job/126256617697) |
| hugging-face-models | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126259876037) |
| hugging-face-models | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256920574) |
| openshell-sdk-package | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126259875847) |
| openshell-sdk-package | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256905849) |
| reviewed-npm-audit | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126259876749) |
| reviewed-npm-audit | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256861302) |
| real-openclaw-dist-harness | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126259875744) |
| real-openclaw-dist-harness | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256939406) |
| static-checks | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126259877298) |
| static-checks | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256905473) |
| compile-artifacts | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126259877615) |
| compile-artifacts | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256861615) |
| installer-integration | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126259877610) |
| installer-integration | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256908633) |
| plugin-tests | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126259877287) |
| plugin-tests | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256860803) |
| build-typecheck | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126259878002) |
| build-typecheck | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256862047) |
| cli-test-shards | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126259878143) |
| cli-test-shards | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256861668) |
| cli-tests | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126259879066) |
| cli-tests | SKIPPED | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256862071) |
| checks | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733501423/job/126269115333) |
| checks | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41733573712/job/126256860894) |
| CodeRabbit | SKIPPED | [Run](https://coderabbit.ai?utm_source=cr_app&utm_medium=github) |
| CodeQL | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/runs/126259961656) |
| ShellCheck | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/runs/126259585380) |
| check-hash | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41741216067) |
| checks | SUCCESS | [Run](https://github.com/NVIDIA/NemoClaw/actions/runs/41741216200) |

The cancelled commit-lint, DCO, and maintainer-edits runs were superseded by successful runs for the same commit. No unresolved check failure was waived.

## Base and managed image evidence

- Base-image candidate: `b7dcc9bb76197fb28ec673867c35974ac799eb15`
- Evidence: verified successful `base-image-publication` for candidate `b7dcc9bb76197fb28ec673867c35974ac799eb15`, [run 41742124116 attempt 2](https://github.com/NVIDIA/NemoClaw/actions/runs/41742124116/attempts/2), [job 126304324838](https://github.com/NVIDIA/NemoClaw/actions/runs/41742124116/job/126304324838). Completed 2026-11-04T00:34:05Z. Job SHA, workflow `.github/workflows/e2e.yaml`, main branch, push event, and attempt identity verified.
- Overall candidate workflow: completed successfully on attempt 2 at 2026-11-04T00:39:58Z; 6 jobs succeeded and 32 were skipped. This automatic push run is not a full-suite qualification. Attempt 1 was cancelled; Rebecca retriggered attempt 2. No agent-issued rerun was needed.

## General E2E decision

- Latest full run: [41722502749](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749), attempt 1; completed, conclusion failure.
- Created: 2026-11-03T21:31:03Z; started: 2026-11-03T21:31:03Z; last updated: 2026-11-03T23:21:09Z.
- Inspected: 2026-11-04T00:42:01.882034+00:00; age since creation: 190 minutes.
- Tested commit: `75f0b056792f396b4ad1649e3c43a2fc5a5c0a64`. It differs from the candidate.
- Rebecca requested monitoring and cancellation recovery for candidate push run 41742124116. Her attempt 2 completed successfully; no new full-suite or focused manual run was requested.
- Maintainer E2E choice: Proceed with the status as shown. Rebecca stated, “I’m comfortable with the E2E risk,” after the three historical test failures, cleanup uncertainty, and different tested SHA were disclosed. This records acceptance of those known risks; it does not classify the failures as harmless or establish a full-suite pass on the candidate.

| Job | State | Started / completed (UTC) | Evidence |
| --- | --- | --- | --- |
| Authenticate and compile the DGX Spark qualification plan | completed / skipped | 2026-11-03T21:40:04Z / 2026-11-03T21:40:03Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126223382457) |
| external-gateway-health | completed / skipped | 2026-11-03T21:40:04Z / 2026-11-03T21:40:03Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126223383378) |
| native-runtime-qualification-producer-plan | completed / skipped | 2026-11-03T21:40:04Z / 2026-11-03T21:40:03Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126223383427) |
| Exact staging Brev Launchable identity | completed / skipped | 2026-11-03T21:40:04Z / 2026-11-03T21:40:03Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126223383737) |
| openshell-dev-artifact | completed / skipped | 2026-11-03T21:40:04Z / 2026-11-03T21:40:03Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126223383889) |
| Exact staging Brev Launchable | completed / success | 2026-11-03T21:42:04Z / 2026-11-03T22:49:20Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126223384049) |
| Build pinned Portable Podman 5.7 toolchain | completed / skipped | 2026-11-03T21:40:04Z / 2026-11-03T21:40:03Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126223385054) |
| Portable Hermes finalization (Podman 5.7, NVIDIA GPU) | completed / skipped | 2026-11-03T21:40:04Z / 2026-11-03T21:40:04Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126223387772) |
| Build pinned native Podman toolchain / ${{ matrix.architecture }} | completed / skipped | 2026-11-03T21:40:04Z / 2026-11-03T21:40:04Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126223387906) |
| Protected llama.cpp DGX Spark qualification | completed / skipped | 2026-11-03T21:40:04Z / 2026-11-03T21:40:04Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126223388097) |
| matrix.jobName | completed / skipped | 2026-11-03T21:40:05Z / 2026-11-03T21:40:04Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126223391346) |
| Aggregate native runtime qualification evidence | completed / skipped | 2026-11-03T21:40:05Z / 2026-11-03T21:40:04Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126223392736) |
| MCP bridge (hermes, docker) | completed / failure | 2026-11-03T21:48:51Z / 2026-11-03T22:01:18Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126226545886) |
| ${{ matrix.display_name }} (${{ matrix.runtime_provider }}) | completed / skipped | 2026-11-03T21:46:12Z / 2026-11-03T21:46:12Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126226547549) |
| MCP bridge dev (${{ matrix.agent }}, ${{ matrix.runtime_provider }}) | completed / skipped | 2026-11-03T21:46:12Z / 2026-11-03T21:46:12Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126226547697) |
| dgx-station-express | completed / skipped | 2026-11-03T21:46:12Z / 2026-11-03T21:46:12Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126226547857) |
| jetson-nvmap-gpu | completed / skipped | 2026-11-03T21:46:13Z / 2026-11-03T21:46:12Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126226548155) |
| Inference: Model Router returns a provider-routed response (docker) / NVIDIA API key | completed / failure | 2026-11-03T21:46:53Z / 2026-11-03T22:00:55Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126226550407) |
| Lifecycle: OpenShell stop and start preserves native agent state (docker) / NVIDIA inference API key | completed / failure | 2026-11-03T21:49:18Z / 2026-11-03T21:59:35Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126226551548) |
| Release qualification | completed / failure | 2026-11-03T23:19:57Z / 2026-11-03T23:20:06Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126267071682) |
| Relevant E2E | completed / skipped | 2026-11-03T23:07:04Z / 2026-11-03T23:07:04Z | [Job](https://github.com/NVIDIA/NemoClaw/actions/runs/41722502749/job/126267074114) |



## Preparation notes

- The fixed candidate remains an ancestor of current main. Later main commits do not change this release plan.
- Remote v0.0.140 tag object and peeled commit still match the plan; v0.0.141 is absent.
- SSH signing is configured and required commands are available. Actual tag signing has not been exercised.
- Historical failure context was carried from the existing report in “Summarize E2E issue status” for run 41722502749, attempt 1. This is not a newly completed assertion audit or current-candidate validation.
- Hermes MCP bridge: invalid-credential discovery timed out before reaching the mock server; valid authenticated discovery passed. Upstream cause remains unproven. Cleanup was reported passed.
- Model Router: onboarding health endpoint did not respond within 600 seconds across 12 checks. Cleanup was reported passed.
- Sandbox survival: direct native-plugin invocation returned HTTP 403 `tool_call_blocked`. Cleanup reported `No active gateway`; sandbox absence remained unverified.
- Release qualification failed as the aggregate of the failed tests. No new repair, workflow dispatch, or release exception is implied by these notes.

Exceptions: The latest full E2E run failed on an earlier commit, including Hermes MCP discovery, Model Router health, and sandbox survival; sandbox cleanup was not verified in the historical report. The maintainer accepts the disclosed E2E risk for this release. Candidate image verification and the smaller automatic candidate run passed, but no full-suite pass on the candidate is claimed.
Assets 2
Loading