Release Notes

August 6, 2026

v0.0.104

NemoClaw v0.0.104 adds an experimental managed llama.cpp option for DGX Spark, trusted private endpoint configuration, and a selectable Personal network policy tier. It makes agent manifests authoritative for persistent state and strengthens gateway, rebuild, registry, and uninstall recovery. It also improves Hermes configuration safety, MCP diagnostics, credential isolation, and host installation guidance.

  • DGX Spark users can now opt into an experimental managed llama.cpp path backed by one repository-owned NVIDIA Nemotron recipe. NemoClaw acquires and verifies the exact GGUF through the shared Hugging Face cache, publishes an authenticated loopback runtime, and uses owner, receipt, and journal state for onboarding, status, doctor, recovery, destroy, and uninstall. This path remains experimental and does not establish a supported agent, model, and runtime tuple until its protected qualification and activation gates pass. For more information, refer to Choose a Local Inference Server, the NemoClaw CLI Commands Reference, and Understand Host Files and State.
  • Custom inference endpoints, MCP servers, and custom policy presets can now opt in to explicitly trusted private hosts. NemoClaw keeps exact host allowlists, pins generated allowed_ips, preserves those pins across restart and rebuild, and applies configured certificate authority trust without widening the endpoint policy. For more information, refer to Meet Custom Endpoint Security Requirements, Create Custom Policy Presets, and Configure Corporate CA Trust.
  • Onboarding now offers a Personal network policy tier for trusted single-user environments that need broad TCP access on ports 80 and 443. The tier continues to block unspecified, loopback, and link-local destinations, and the documentation calls out its larger trust boundary so users can choose it deliberately. For more information, refer to Network Policies Reference and Security Best Practices.
  • The selected agent manifest is now the canonical definition of persistent state for backup, restore, wipe, and Shields operations. State operations fail closed when stored authority drifts from the manifest, and lifecycle lock timeouts remain side-effect free. For more information, refer to Create and Restore Snapshots, Security Best Practices, and Trusted Computing Base.
  • Gateway and sandbox recovery now waits for the managed gateway lease, resumes journaled rebuild recreation, and applies compatibility decisions before rejecting a restored sandbox as not ready. Malformed sandbox registry data fails closed, gateways that never served receive bounded boot-grace recovery, and registry repair remains scoped to the target gateway. For more information, refer to Understand Gateway Lifecycle Control, Recover and Rebuild Sandboxes, and Troubleshooting.
  • Scoped uninstall now deletes the sandbox before removing its unit and preserves the gateway and unit when sandbox deletion fails, leaving a retryable state instead of partial teardown. Desktop metadata no longer blocks uninstall when the managed runtime state is otherwise valid. For more information, refer to Uninstall NemoClaw and the NemoClaw CLI Commands Reference.
  • Hermes configuration now comes from one typed policy, keeps the dashboard token only in the process environment, and recalculates the context window when the selected model changes. WhatsApp setup reports the gateway and dashboard sessions separately, while the managed Hermes image and dependency checks include the reviewed security updates. For more information, refer to Switch Models, Set Up WhatsApp, and Credential Storage.
  • OpenClaw MCP discovery now has a bounded tools/list timeout that can be tuned from 1500 to 10000 milliseconds with NEMOCLAW_MCP_TOOLS_LIST_TIMEOUT_MS. Opt-in NEMOCLAW_MCP_SHADOW_DIAGNOSTICS=1 diagnostics report redacted operation timings and rolling latency summaries without changing MCP behavior. For more information, refer to Troubleshoot MCP Servers and the NemoClaw CLI Commands Reference.
  • Onboarding now blocks raw Brave and Tavily web-search credentials from entering the sandbox and directs users to the supported credential flow. Preflight remediation includes stable advisory identifiers, and malformed registry diagnostics remain redacted. For more information, refer to Credential Storage and Troubleshooting.
  • Installation now resolves nemoclaw through the user-local shim when required, and remote network-policy guidance opens the sandbox terminal with openshell term before running approval commands. For more information, refer to the NemoClaw CLI Commands Reference and Approve Network Requests.