From 29100a321cd9fb2cb12697e19b28db40885f5f5b Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sat, 29 Aug 2026 16:51:31 +0000 Subject: [PATCH 1/5] docs: catch up after main Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- docs/reference/commands.mdx | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/docs/reference/commands.mdx b/docs/reference/commands.mdx index c588559c55e..c7413e20025 100644 --- a/docs/reference/commands.mdx +++ b/docs/reference/commands.mdx @@ -1429,8 +1429,9 @@ The command does not take over a system service or an unrelated user-managed Oll -For an active Portable Hermes sandbox, `connect --probe-only` can resume only the stopped Ollama runner named by the published receipt. -The `recover` command uses the same inference recovery path, but ordinary `connect` does not. +For an active Portable Hermes sandbox with the `ollama-local` provider, `connect --probe-only` can resume only the stopped Ollama runner named by the published receipt. +For another configured provider, including a descriptor-backed compatible endpoint, `connect --probe-only` verifies the recorded route without Ollama recovery. +The `recover` command uses the same Ollama inference recovery path, but ordinary `connect` does not. Follow [Recover Portable Published Ollama](../manage-sandboxes/operate-sandboxes/recover-and-rebuild-sandboxes#recover-portable-published-ollama) for authority checks, route proof, rollback, and failure handling. From 52d96bb450f443bdbbbc7eb9ce4638187105511c Mon Sep 17 00:00:00 2001 From: San Dang Date: Mon, 31 Aug 2026 09:33:14 +0530 Subject: [PATCH 2/5] docs: clarify supported agent runtime scope --- docs/reference/architecture.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/reference/architecture.mdx b/docs/reference/architecture.mdx index 1710c1a8984..eff18f9b393 100644 --- a/docs/reference/architecture.mdx +++ b/docs/reference/architecture.mdx @@ -3,7 +3,7 @@ # SPDX-License-Identifier: Apache-2.0 title: "Architecture Details" sidebar-title: "Architecture Details" -description: "Learn how NemoClaw combines a host CLI, sandbox integration layer, and versioned blueprint to run compatible agents in controlled OpenShell sandboxes." +description: "Learn how NemoClaw combines a host CLI, sandbox integration layer, and versioned blueprint to run supported agent runtimes in controlled OpenShell sandboxes." description-agent: "Describes the NemoClaw integration layer and blueprint architecture and how they orchestrate compatible agent sandboxes. Use when looking up architecture, agent integration, plugin structure, or blueprint design." keywords: ["nemoclaw architecture", "nemoclaw agent architecture", "nemoclaw plugin blueprint structure"] content: From b1d30fb354ed34160998ed9c26c70463264f3f14 Mon Sep 17 00:00:00 2001 From: San Dang Date: Mon, 31 Aug 2026 09:45:39 +0530 Subject: [PATCH 3/5] docs: align architecture support terminology --- docs/reference/architecture.mdx | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/reference/architecture.mdx b/docs/reference/architecture.mdx index eff18f9b393..05feb32054f 100644 --- a/docs/reference/architecture.mdx +++ b/docs/reference/architecture.mdx @@ -4,7 +4,7 @@ title: "Architecture Details" sidebar-title: "Architecture Details" description: "Learn how NemoClaw combines a host CLI, sandbox integration layer, and versioned blueprint to run supported agent runtimes in controlled OpenShell sandboxes." -description-agent: "Describes the NemoClaw integration layer and blueprint architecture and how they orchestrate compatible agent sandboxes. Use when looking up architecture, agent integration, plugin structure, or blueprint design." +description-agent: "Describes the NemoClaw integration layer and blueprint architecture and how they orchestrate supported agent runtimes in sandboxes. Use when looking up architecture, agent integration, plugin structure, or blueprint design." keywords: ["nemoclaw architecture", "nemoclaw agent architecture", "nemoclaw plugin blueprint structure"] content: type: "reference" @@ -51,7 +51,7 @@ graph LR subgraph SANDBOX["Sandbox Container 🔒"] direction TB - AGENT["Compatible Agent
Selected managed runtime"]:::agent + AGENT["Supported Agent Runtime
Selected managed runtime"]:::agent PLUG["NemoClaw Integration
Managed configuration
and runtime context"]:::sandbox end end @@ -182,7 +182,7 @@ Layering from top to bottom: | Host CLI | Host process (`$$nemoclaw` on Node.js) | Orchestrates OpenShell via `openshell` CLI calls. | | OpenShell gateway | Host process by default; optional Linux compatibility container when the gateway binary needs a newer host ABI | Hosts the credential store, owns sandbox lifecycle coordination, and provides the L7 proxy. | | Docker daemon | Host service | Runs the Docker-driver sandbox container and, on affected Linux hosts, the optional gateway compatibility container. | -| Sandbox container | Docker container | Runs the selected compatible agent and NemoClaw integration under Landlock + seccomp + netns. | +| Sandbox container | Docker container | Runs the selected supported agent runtime and NemoClaw integration under Landlock + seccomp + netns. | | OpenShell L7 proxy | Gateway process | Intercepts agent egress and rewrites `Authorization` headers (Bearer/Bot) and URL-path segments to inject the real credential at the network boundary. | NemoClaw never gives the sandbox a raw provider key. @@ -321,7 +321,7 @@ The direct blueprint runner still carries a pinned OpenShell Community OpenClaw Inside the sandbox: -- The selected compatible agent runs with the NemoClaw integration layer installed or generated for that agent. +- The selected supported agent runtime runs with the NemoClaw integration layer installed or generated for that runtime. - Inference calls are routed through OpenShell to the configured provider. - Network egress is restricted by the baseline policy for the selected agent profile. - Filesystem access is confined to `/sandbox` and `/tmp` for read-write access, with system paths read-only. From cc82ec474cab978f49b94a23b753a9e9a81fd66c Mon Sep 17 00:00:00 2001 From: San Dang Date: Mon, 31 Aug 2026 09:59:42 +0530 Subject: [PATCH 4/5] docs: complete support-boundary terminology --- docs/changelog/2026-08-31.mdx | 3 ++- docs/reference/architecture.mdx | 6 +++--- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/docs/changelog/2026-08-31.mdx b/docs/changelog/2026-08-31.mdx index 552bb740494..2a1f7a5ea9a 100644 --- a/docs/changelog/2026-08-31.mdx +++ b/docs/changelog/2026-08-31.mdx @@ -33,7 +33,8 @@ It also removes the deprecated Brev deploy wrapper and adds contributor and main - The deprecated `nemoclaw deploy` Brev compatibility command has been removed. Remote hosts use their provisioning workflow, the hosted installer, and `nemoclaw onboard`; `deploy` is now available as a sandbox name. Related change: [PR #10576](https://github.com/NVIDIA/NemoClaw/pull/10576). -- Contributors can run the checked-in PR Review Advisor specialists on committed and working-tree changes with `npm run review:local` before PR publication. +- Contributors with a prepared checkout can run the checked-in PR Review Advisor specialists on committed and working-tree changes with `npm run review:local` before PR publication. + The [local-run prerequisites](https://github.com/NVIDIA/NemoClaw/blob/main/tools/pr-review-advisor/README.md#local-run) name the required host tools, the `origin/main` trust base, and the credential boundary. Maintainer analysis now emits bounded slow-test evidence and Perfetto-compatible PR lifetime traces with revision, readiness, review-request, workflow, job, and step timelines. Related changes: [PR #10581](https://github.com/NVIDIA/NemoClaw/pull/10581), [PR #10604](https://github.com/NVIDIA/NemoClaw/pull/10604), [PR #10608](https://github.com/NVIDIA/NemoClaw/pull/10608), [PR #10611](https://github.com/NVIDIA/NemoClaw/pull/10611), [PR #10616](https://github.com/NVIDIA/NemoClaw/pull/10616), and [PR #10617](https://github.com/NVIDIA/NemoClaw/pull/10617). - Development qualification now contains a provider-owned record and dormant executor for the OpenShell v0.0.24 and MXC v0.7.0-rc1 checkpoint on physical Windows. diff --git a/docs/reference/architecture.mdx b/docs/reference/architecture.mdx index 05feb32054f..77c7c006f90 100644 --- a/docs/reference/architecture.mdx +++ b/docs/reference/architecture.mdx @@ -13,7 +13,7 @@ NemoClaw combines a host CLI, an in-sandbox integration layer, and a versioned Y ## System Overview -NVIDIA OpenShell is a general-purpose agent runtime. +NVIDIA OpenShell is a general-purpose sandbox runtime and policy platform. It provides sandbox containers, a credential-storing gateway, inference proxying, and policy enforcement, but it has no opinions about what runs inside. NemoClaw is an opinionated reference stack built on OpenShell that handles what goes in the sandbox, prepares agent-specific integration, and makes the setup accessible. @@ -158,7 +158,7 @@ graph TB subgraph DOCKER["Docker daemon"] direction TB - SANDBOX["Sandbox container 🔒
Landlock + seccomp + netns
Compatible agent + NemoClaw integration"]:::sandbox + SANDBOX["Sandbox container 🔒
Landlock + seccomp + netns
Supported agent runtime + NemoClaw integration"]:::sandbox end end @@ -347,7 +347,7 @@ Inference requests from the agent never leave the sandbox directly. OpenShell intercepts them and routes them to the configured provider: ```text -Compatible agent (sandbox) ──▶ OpenShell gateway ──▶ Provider endpoint +Supported agent runtime (sandbox) ──▶ OpenShell gateway ──▶ Provider endpoint ``` When you select the Model Router provider, the OpenShell gateway routes to a host-side router process instead of a single upstream model. From 498415ccfac8618f7f01c39d3dd5d8c26f2defed Mon Sep 17 00:00:00 2001 From: San Dang Date: Mon, 31 Aug 2026 10:10:24 +0530 Subject: [PATCH 5/5] docs: clarify v0.0.117 recovery summary --- docs/changelog/2026-08-31.mdx | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/changelog/2026-08-31.mdx b/docs/changelog/2026-08-31.mdx index 2a1f7a5ea9a..343015ddad7 100644 --- a/docs/changelog/2026-08-31.mdx +++ b/docs/changelog/2026-08-31.mdx @@ -5,7 +5,8 @@ ## v0.0.117 -NemoClaw v0.0.117 makes OpenShell the sole durable network-policy authority and improves fail-closed sandbox, Shields, installer, Portable runtime, and messaging recovery. +NemoClaw v0.0.117 makes OpenShell the sole durable network-policy authority. +It improves fail-closed recovery for sandboxes, Shields, the installer, Portable runtimes, and messaging channels. It also removes the deprecated Brev deploy wrapper and adds contributor and maintainer analysis tools. - OpenShell is now the sole durable source of sandbox policy state.