Piotr Mlocek
5befdbf307
The sandbox proxy had a control_plane_endpoints allowlist that let sandboxed processes reach the gateway without OPA evaluation or SSRF checks. This is a security issue: if the sandbox can talk to the control plane, it could modify its own policy, exfiltrate data through provider environment endpoints, or abuse other gateway APIs. All connections now go through OPA policy evaluation and SSRF protection with no exceptions. Removes AllowedEndpoint, parse_endpoint_url, the is_control_plane bypass in handle_tcp_connection, and the engine field from ConnectDecision.
NemoClaw
NemoClaw is the runtime environment for autonomous agents—the "Matrix" where they live, work, and verify.
While coding tools like Claude help agents write logic, NemoClaw provides the infrastructure to run it, offering a programmable factory where agents can spin up physics simulations to master tasks, generate synthetic data to fix edge cases, and safely iterate through thousands of failures in isolated sandboxes.
It transforms the data center from a static deployment target into a continuous verification engine, allowing agents to autonomously build and operate complex systems—from physical robotics to self-healing infrastructure—without needing a human to manage the infrastructure.
Quickstart
Prerequisites
- Docker — Docker Desktop (or a Docker daemon) must be running.
- Python 3.12+
- uv 0.9+
Install
uv pip install nemoclaw \
--upgrade \
--pre \
--index-url https://urm.nvidia.com/artifactory/api/pypi/nv-shared-pypi/simple
The nemoclaw binary is installed into your Python environment. Use uv run nemoclaw to invoke it, or activate your venv first with source .venv/bin/activate.
Create a sandbox
To install a Openclaw cluster and start a sandbox
nemoclaw sandbox create -- claude # or opencode or codex
To run a sandbox on a remote machine, pass --remote [remote-ssh-host].
For more information see nemoclaw sandbox create --help.
The sandbox container includes the following tools by default:
| Category | Tools |
|---|---|
| Agent | claude, opencode, codex |
| Language | python (3.12), node (22) |
| Developer | gh, git, vim, nano |
| Networking | ping, dig, nslookup, nc, traceroute, netstat |
For additional sandbox images see the NVIDIA/NemoClaw-Community images. You can also build your own custom images.
Deploy a cluster
Note: nemoclaw sandbox create automatically deploys a cluster if one isn't already running.
To deploy a cluster explicitly:
nemoclaw cluster admin deploy
For remote deployment:
nemoclaw cluster admin deploy --remote user@host
Upgrading
To upgrade, redeploy your cluster to pick up the latest server and sandbox images:
nemoclaw cluster admin deploy
This will prompt you to recreate the cluster. Select "yes" to recreate the cluster.
Developing
See CONTRIBUTING.md for building from source and contributing to NemoClaw.
Architecture
See architecture/ for detailed architecture docs and design decisions.