fix(policy): grant managed CA bundle read access

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

Author: ericksoa

agents/hermes/policy-additions.yaml

@@ -21,6 +21,7 @@ filesystem_policy:
     - /proc
     - /dev/urandom
     - /app
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /etc
     - /var/log
     - /var/lib/dpkg                  # Allow package-version inspection without package mutation.

agents/hermes/policy-permissive.yaml

@@ -22,6 +22,7 @@ filesystem_policy:
     - /proc
     - /dev/urandom
     - /app
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /etc
     - /var/log
     - /var/lib/dpkg                  # Allow package-version inspection without package mutation.

agents/langchain-deepagents-code/policy-additions.yaml

@@ -18,6 +18,7 @@ filesystem_policy:
     - /proc
     - /dev/urandom
     - /app
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /etc
     - /var/log
     - /var/lib/dpkg                  # Allow package-version inspection without package mutation.

agents/openclaw/policy-permissive.yaml

@@ -18,6 +18,7 @@ filesystem_policy:
     - /proc
     - /dev/urandom
     - /app
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /etc
     - /var/log
     - /var/lib/dpkg                  # Allow package-version inspection without package mutation.

nemoclaw-blueprint/policies/openclaw-sandbox-permissive.yaml

@@ -23,6 +23,7 @@ filesystem_policy:
     - /proc
     - /dev/urandom
     - /app
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /etc
     - /var/log
     - /var/lib/dpkg                  # Allow package-version inspection without package mutation.

nemoclaw-blueprint/policies/openclaw-sandbox.yaml

@@ -26,6 +26,7 @@ filesystem_policy:
     - /proc
     - /dev/urandom
     - /app
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /etc
     - /var/log
     - /var/lib/dpkg                  # Allow package-version inspection without package mutation.

src/lib/onboard/initial-policy-real-policy.test.ts

@@ -7,6 +7,8 @@ import path from "node:path";
 import { afterEach, describe, expect, it } from "vitest";
 import YAML from "yaml";
 
+import { SHIPPED_MANAGED_IMAGE_AGENTS } from "./managed-image/contract";
+import { MANAGED_STARTUP_MERGED_CA_FILE } from "./managed-startup/image-runtime";
 import { prepareInitialSandboxCreatePolicy } from "./initial-policy";
 
 type PolicyRule = {
@@ -70,6 +72,39 @@ describe("initial sandbox policy real preset merge", () => {
     { path: ["agents", "hermes", "policy-permissive.yaml"], agent: "hermes" },
   ] as const;
 
+  const managedStartupCaPolicyCases = [
+    ...shippingPolicyCases,
+    {
+      path: ["agents", "langchain-deepagents-code", "policy-additions.yaml"],
+      agent: "langchain-deepagents-code",
+    },
+  ] as const;
+
+  it("covers every shipped managed-image agent in the managed startup CA policy cases", () => {
+    expect(new Set(managedStartupCaPolicyCases.map(({ agent }) => agent))).toEqual(
+      new Set(SHIPPED_MANAGED_IMAGE_AGENTS),
+    );
+  });
+
+  it.each(managedStartupCaPolicyCases)(
+    "grants $agent policy $path exact read-only access to the managed startup CA bundle (#9360)",
+    (policyCase) => {
+      const prepared = prepareInitialSandboxCreatePolicy(repoPath(...policyCase.path), [], {
+        agentName: policyCase.agent,
+      });
+      const policy = readPreparedPolicy(prepared);
+      const readOnly = policy.filesystem_policy?.read_only ?? [];
+      const readWrite = policy.filesystem_policy?.read_write ?? [];
+
+      expect(readOnly, policyCase.path.join("/")).toContain(MANAGED_STARTUP_MERGED_CA_FILE);
+      expect(readWrite, policyCase.path.join("/")).not.toContain(MANAGED_STARTUP_MERGED_CA_FILE);
+      expect(readOnly, policyCase.path.join("/")).not.toContain("/run");
+      expect(readWrite, policyCase.path.join("/")).not.toContain("/run");
+      expect(readOnly, policyCase.path.join("/")).not.toContain("/run/nemoclaw");
+      expect(readWrite, policyCase.path.join("/")).not.toContain("/run/nemoclaw");
+    },
+  );
+
   it.each([
     {
       path: ["nemoclaw-blueprint", "policies", "openclaw-sandbox.yaml"],