NemoClaw v0.0.89 is out

[ericksoa]

NemoClaw v0.0.89 makes DGX Station installation more resilient across qualified host configurations. Station preparation now recognizes reviewed OTA-upgraded GB300 systems, preserves accepted preparation recipes through reboot handoffs, validates package state before mutation, and handles qualified DKMS and PackageKit states without relaxing fail-closed checks for unknown drift.

This release also strengthens the continuity of day-to-day agent work. Onboarding preserves inference-provider and endpoint provenance, rebuilds retain intentional model and Hermes state, sandbox recovery reports and repairs more honestly, messaging policy changes disclose their full egress impact before mutation, and machine-readable CLI output stays clean and safe.

Underneath those user-facing improvements, v0.0.89 adds stronger resource-pressure evidence, more trustworthy E2E failure classification, leaner rebuild coverage, hardened policy scanners, and a more maintainable review-advisor foundation. Together, these changes make failures easier to distinguish from infrastructure loss and give maintainers better evidence when deciding whether a build is ready to ship.

DGX Station installation and host preparation

• #7090 retains already-valid DGX Station prerequisites instead of repeating disruptive preparation, keeping qualified hosts stable across installer reruns.
• #7136 verifies recovered sandbox stability during installation recovery, so a resumed flow does not mistake a briefly present sandbox for a healthy one.
• #7183 restores Station package preparation, repairing the host setup path needed before NemoClaw can install reliably.
• #7202 validates installed Station package state before mutation, preventing unnecessary or unsafe package operations.
• #7204 preserves the accepted Station Express recipe across host reboot and login handoff, allowing preparation to resume with the same reviewed choices.
• #7214 retains the qualified Station DKMS revision, avoiding a downgrade or replacement when the installed forward revision is already approved.
• #7223 accepts OTA-upgraded DGX OS on Station GB300 without depending on an obsolete image marker, while retaining explicit hardware qualification.
• #7237 unblocks forced DGX Station preparation on real GB300 hosts by recognizing both reviewed PCI device variants.
• #7241 allows an idle PackageKit daemon during Station setup while continuing to reject active package transactions.
• #7221 reaps managed vLLM processes left behind by failed or interrupted startup, preventing stale inference processes from interfering with later installation attempts.

Onboarding, inference, and sandbox continuity

• #6874 clarifies Ollama model selection so users can distinguish an explicit model choice from automatic discovery.
• #6910 respawns the OpenClaw gateway after a managed restart, restoring agent availability without requiring manual recovery.
• #7022 adds versioned onboarding resume checkpoints with tri-state decisions, making interrupted flows safer to continue as the onboarding state evolves.
• #7096 preserves the Hermes default kanban database during rebuilds so durable task state survives sandbox replacement.
• #7164 reports the active vLLM installation in onboarding phase heartbeats, making long-running local inference setup easier to understand and diagnose.
• #7165 sanitizes inference route display values before terminal output, preventing provider, endpoint, or model metadata from injecting terminal controls.
• #7184 stops the detached Hermes dashboard forward watcher during uninstall so no background process survives sandbox removal.
• #7186 attaches the selected inference provider when creating a sandbox, preserving the user's intended runtime configuration from the start.
• #7192 observes the host gateway without restarting it during probe-only recovery and waits for the target sandbox before checking readiness.
• #7216 refreshes stale agent primary-model configuration during rebuild while preserving intentional non-default model pins and durable tuning.
• #7218 keeps human-readable gateway-selection diagnostics out of JSON standard output, preserving a clean machine-readable contract.
• #7225 recommends start when status detects a crashed sandbox container, directing users to the recovery action that matches the actual state.
• #7242 preserves the original onboarding endpoint provenance so later inference changes retain the intended custom-endpoint security boundary.

Policy, advisories, and documentation

• #6945 establishes a structured advisory registry, giving host-remediation guidance a consistent and extensible source of truth.
• #7159 hardens trusted policy scanners so malformed or misleading policy inputs fail closed during validation.
• #7166 corrects API-key casing in the credential-rotation documentation heading, keeping the published guidance consistent and searchable.
• #7167 migrates host-remediation checks onto the structured advisory foundation, reducing duplicated logic and improving consistency.
• #7187 discloses the complete effective messaging-preset egress before channel or policy mutation, including hosts, ports, transport, paths, methods, and binary allowances.

CI and release confidence

• #7081 moves PR review-advisor workflow logic into tested helpers, making the review pipeline easier to validate and maintain.
• #7148 removes a redundant current-base build from the normal Hermes rebuild E2E lane, reducing runtime without dropping the stale-base coverage that matters.
• #7149 captures Hermes rebuild phase timings, giving maintainers concrete evidence for performance comparisons and bottleneck analysis.
• #7168 classifies hosted-runner resource pressure and infrastructure loss with bounded, secret-safe evidence and a single confirmed runner-loss retry.
• #7217 prevents false E2E failure signals, improving the reliability of the release evidence maintainers use for go/no-go decisions.
• #7233 tolerates the expected gateway banner during a fresh re-onboard, preventing presentation noise from being reported as a product failure.

Release surface

• #7255 adds the canonical v0.0.89 changelog entry, preserving the release's user-facing behavior and documentation contract in the tagged source.

Thank you

Thank you to external contributors @HOYALIM, @atulya-singh, @tyeth-ai-assisted, @HwangJohn, @RUSHcitizen, and @souvikDevloper for their contributions to this release.

See the complete comparison: v0.0.88...v0.0.89.