NemoClaw v0.0.80 is out

[prekshivyas]

NemoClaw v0.0.80 is a stability and boundary-hardening release. It tightens the edges where the sandbox meets the outside world: host corporate proxy CAs can now be imported into the sandbox trust bundle so external channel endpoints verify TLS behind a MITM proxy (#6292), sandbox base-image resolution prefers release-matched tags and fails closed on incompatible pulls (#6624), route probing rejects untrusted results (#6637), and Docker health checks no longer trust a stale gateway PID after the start supervisor exits (#5569). Object shapes are now validated at boundaries so malformed input fails predictably (#6640).

On the user-facing runtime, Hermes moves to the v0.18 line and gains Slack Block Kit rendering, including native table blocks, without new scopes or a reinstall (#6507), and Hermes connections apply a light-compatible terminal skin when the host reports a light background (#6578). OpenRouter traffic now flows through a host-local attribution adapter that injects the required headers and binds to the key by hash without storing it (#6584), while OpenRouter-backed Deep Agents Code sandboxes use the native openrouter provider (#6616). Onboarding and recovery preserve intent across more interrupted flows: recovery is scoped to the sandbox (#6634), pending route reservations survive a not-ready recreate (#6626), and compatible provider recovery is preserved through the rebuild handoff (#6665).

Finally, this release invests in maintenance confidence. The documentation set gets a credential rotation guide (#6266), clearer engineering behavior guidance for contributors (#6521), and a round of readability, scoping, and structural cleanup across the inference, policy, and Deep Agents pages. Release confidence improves too: CI critical path shrinks through eight-shard CLI coverage (#6667), the E2E advisor and mock parity are automated (#6583), and post-merge risk-gate and shadow-E2E diagnostics are easier to read (#6644, #6648).

Hermes and Inference

• #6507 upgrades Hermes to the v0.18 release line and enables Slack Block Kit rendering, so final Hermes Slack responses can use Block Kit including native table blocks for Markdown tables, with no new scopes and no Slack app reinstall.
• #6578 applies a light-compatible terminal skin to Hermes sandbox connections when the host terminal reports a light background, unless a Hermes theme override is set, so output stays readable on light terminals.
• #6584 routes OpenRouter runtime traffic through a host-local adapter that injects the HTTP-Referer and X-OpenRouter-Title attribution headers, binds to the OpenShell-held key by SHA-256 hash without storing it, and listens on port 11437 by default so attribution is correct without leaking the key.
• #6616 makes OpenRouter-backed LangChain Deep Agents Code sandboxes use Deep Agents' native openrouter provider instead of OpenAI request shaping, so OpenRouter routes behave natively.
• #6656 preserves the native Nemotron profile registration in the Deep Agents Code image build, keeping the intended provider profile intact.

OpenClaw, Sandbox, and Network Stability

• #6292 imports a host corporate proxy root CA into the sandbox trust bundle so external channel endpoints such as api.telegram.org verify TLS behind a corporate MITM proxy; NemoClaw appends the validated CA, never replaces the OpenShell root, and can be opted out with NEMOCLAW_CORPORATE_CA_IMPORT=0.
• #6624 makes sandbox base-image resolution prefer release-matched tags before mutable :latest, validate explicit overrides exactly, and fail closed when a requested image cannot be pulled or fails compatibility checks, so installs run on a known-good base.
• #6637 hardens sandbox route probing to reject untrusted probe results and report actionable rebuild guidance when the trusted route-probe helper is missing.
• #5569 clears the gateway marker when the start supervisor exits so Docker health checks no longer trust a stale gateway PID.
• #6629 makes a bare connect with no sandbox name connect to the registry default and fall back to the first non-pending registration, with clear guidance when only pending or no registrations remain.
• #5670 injects a yes flag for MCP stdio servers launched through npx so a first-use install prompt no longer blocks the MCP initialize handshake.
• #6640 validates object shapes at boundaries so malformed or unexpected input is rejected predictably instead of propagating.

Onboarding and Recovery

• #6634 scopes live inference recovery to the sandbox so recovery does not reach beyond the affected sandbox.
• #6626 keeps a pending route reservation through a not-ready recreate so an interrupted onboarding does not lose its reserved route.
• #6596 probes registered extra providers exactly during re-onboarding so provider state matches the selected set.
• #6623 surfaces captured, redacted Docker diagnostics on failed cluster-image builds instead of an opaque exit code.
• #6665 preserves compatible provider recovery through the rebuild handoff so a rebuild keeps working providers.
• #6655 drops the experimental label from the running Local vLLM provider entry on managed platforms such as DGX Spark and DGX Station.
• #6610 clarifies the installer's pre-upgrade backup abort message so it names skipped sandboxes as well as failures, making remediation clearer.

Skills, Docs, and Release Surface

• #6266 adds a security credential rotation guide so operators have a documented rotation path.
• #6521 adds engineering behavior guidance to the contributing docs so contributors share a consistent engineering posture.
• #6590 improves inference page readability.
• #6659 splits the inference guides into nested topics for easier navigation.
• #6601 replaces a developer walkthrough command in the policy docs so the documented command matches current behavior.
• #6608 scopes a policy approval link to published guides so readers land on live pages.
• #6602 scopes MCP adapter wording by agent so guidance applies only where it is accurate.
• #6603 clarifies Deep Agents workspace creation timing.
• #6604 replaces a deprecated Deep Agents deploy command in the security docs.
• #6605 updates the host files and state reference.
• #6606 fixes a Deep Agents troubleshooting security link.
• #6654 removes pre-Fern documentation assets that are no longer used.
• #6658 preserves Fern preview paths during that cleanup so preview links keep resolving.

CI and Release Confidence

• #6583 automates the E2E advisor and mock parity so release gating is more consistent.
• #6667 reduces the required CI critical path by running CLI and integration coverage across eight shards instead of five, cutting the slowest shard's workload.
• #6641 batches codebase-growth-guardrails blob fetches and adds retry so that check is faster and less flaky.
• #6644 clarifies post-merge risk-gate failures so operators can act on them.
• #6648 bounds shadow E2E wait logs so post-merge diagnostics stay readable.
• #6607 aligns TypeScript on 6.0.3 across the repo for a consistent toolchain.

Thank you

Thank you to the external contributors who shipped changes in this release:

• @zhiyanliu for #5569
• @Abhi190702 for #5670
• @sauravdev for #6266
• @HOYALIM for #6610 and #6616

Full comparison

v0.0.79...v0.0.80