NemoClaw 0.0.115 tightens recovery and credential boundaries
NVIDIA released NemoClaw v0.0.115 with exact-identity checks for Portable Hermes recovery, release-pinned managed images, revision-scoped messaging credentials, bounded sandbox cleanup, a nonzero stale-state check, symlink-safe configuration reads, redacted URL credentials in diagnostics, and stricter lifecycle authority. It also adds qualified local Nemotron inference and an experimental plan validator for externally managed OpenShell targets.
Why it matters: Agent platforms often fail during recovery rather than steady state. Binding restarts, credentials, images, policies, routes, and cleanup to durable identities reduces the chance that a repair silently mutates the wrong sandbox or reports success with…