fix(policy): allow managed startup CA reads

agents/hermes/policy-additions.yaml

@@ -22,6 +22,7 @@ filesystem_policy:
     - /dev/urandom
     - /app
     - /etc
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /var/log
     - /var/lib/dpkg                  # Allow package-version inspection without package mutation.
   read_write:

agents/hermes/policy-permissive.yaml

@@ -23,6 +23,7 @@ filesystem_policy:
     - /dev/urandom
     - /app
     - /etc
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /var/log
     - /var/lib/dpkg                  # Allow package-version inspection without package mutation.
   read_write:

agents/langchain-deepagents-code/policy-additions.yaml

@@ -19,6 +19,7 @@ filesystem_policy:
     - /dev/urandom
     - /app
     - /etc
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /var/log
     - /var/lib/dpkg                  # Allow package-version inspection without package mutation.
   read_write:

agents/openclaw/policy-permissive.yaml

@@ -19,6 +19,7 @@ filesystem_policy:
     - /dev/urandom
     - /app
     - /etc
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /var/log
     - /var/lib/dpkg                  # Allow package-version inspection without package mutation.
   read_write:

agents/pi/policy-additions.yaml

@@ -13,6 +13,7 @@ filesystem_policy:
     - /proc
     - /dev/urandom
     - /etc
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /var/log
     - /var/lib/dpkg # Allow package-version inspection without package mutation.
   read_write:

nemoclaw-blueprint/policies/openclaw-sandbox-permissive.yaml

@@ -24,6 +24,7 @@ filesystem_policy:
     - /dev/urandom
     - /app
     - /etc
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /var/log
     - /var/lib/dpkg                  # Allow package-version inspection without package mutation.
   read_write:

nemoclaw-blueprint/policies/openclaw-sandbox.yaml

@@ -27,6 +27,7 @@ filesystem_policy:
     - /dev/urandom
     - /app
     - /etc
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
     - /var/log
     - /var/lib/dpkg                  # Allow package-version inspection without package mutation.
   read_write:

test/managed-startup-ca-policy.test.ts

@@ -0,0 +1,42 @@
+// SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { readFileSync } from "node:fs";
+
+import { describe, expect, it } from "vitest";
+import YAML from "yaml";
+
+const CA_BUNDLE = "/run/nemoclaw/managed-startup-ca-bundle.pem";
+const POLICY_PATHS = [
+  "nemoclaw-blueprint/policies/openclaw-sandbox.yaml",
+  "nemoclaw-blueprint/policies/openclaw-sandbox-permissive.yaml",
+  "agents/openclaw/policy-permissive.yaml",
+  "agents/hermes/policy-additions.yaml",
+  "agents/hermes/policy-permissive.yaml",
+  "agents/langchain-deepagents-code/policy-additions.yaml",
+  "agents/pi/policy-additions.yaml",
+] as const;
+
+type Policy = {
+  filesystem_policy?: {
+    read_only?: string[];
+    read_write?: string[];
+  };
+};
+
+describe("managed startup CA policy", () => {
+  it.each(POLICY_PATHS)("grants only exact read access in %s", (policyPath) => {
+    const policy = YAML.parse(readFileSync(policyPath, "utf8")) as Policy;
+    const runtimePrefix = "/run/nemoclaw";
+    const readOnlyRuntimeGrants = (policy.filesystem_policy?.read_only ?? []).filter(
+      (entry) => entry === runtimePrefix || entry.startsWith(`${runtimePrefix}/`),
+    );
+    const readWriteRuntimeGrants = (policy.filesystem_policy?.read_write ?? []).filter(
+      (entry) => entry === runtimePrefix || entry.startsWith(`${runtimePrefix}/`),
+    );
+
+    expect(policy.filesystem_policy?.read_only).toContain(CA_BUNDLE);
+    expect(readOnlyRuntimeGrants).toEqual([CA_BUNDLE]);
+    expect(readWriteRuntimeGrants).toEqual([]);
+  });
+});