NVIDIA NemoClaw: Reference Stack for Sandboxed AI Agents in OpenShell

NVIDIA NemoClaw is an open source reference stack for running always-on AI agents more safely inside NVIDIA OpenShell sandboxes. It provides guided onboarding, a hardened blueprint, routed inference, network policy, and lifecycle management through a single CLI.

Supported agents:

• OpenClaw (default)
• Hermes

For capabilities, architecture, security controls, and the full feature list, see the NemoClaw documentation.

Get Started

Review Prerequisites before installing. For Hermes, set NEMOCLAW_AGENT=hermes before running the installer, or use the nemohermes alias after install.

Agent	Guide
OpenClaw (default)	Quickstart with OpenClaw
Hermes	Quickstart with Hermes

Documentation

Refer to the following pages on the official documentation website for more information on NemoClaw.

Page	Description
Overview	What NemoClaw does and how it fits together.
Architecture Overview	High-level overview of Plugin, blueprint, sandbox lifecycle, and protection layers.
Ecosystem	How OpenClaw, OpenShell, and NemoClaw form a stack and when to use NemoClaw versus OpenShell alone.
Architecture Details	Detailed description of Plugin structure, blueprint lifecycle, sandbox environment, and host-side state.
Prerequisites	Hardware, software, and supported platforms, with any platform-specific pre-setup.
Inference Options	Supported providers, validation, and routed inference configuration.
Network Policies	Baseline rules, operator approval flow, and egress control.
Customize Network Policy	Static and dynamic policy changes, presets.
Security Best Practices	Controls reference, risk framework, and posture profiles for sandbox security.
Sandbox Hardening	Container security measures, capability drops, process limits.
CLI Commands	Full NemoClaw CLI command reference.
Troubleshooting	Common issues and resolution steps.

Community

Join the NemoClaw community to ask questions, share feedback, and report issues. NemoClaw is an alpha project, so maintainers review issues, discussions, and pull requests on a best effort basis without guaranteed response timelines.

---

GitHub에서 전체 내용 보기