docs: update v0.0.98 release entry

[jyaunches]

Summary

Update the canonical NemoClaw v0.0.98 release entry with the managed-image security remediation that merged after the original release documentation.
The entry now records reviewed Perl 5.44.0 packages across OpenClaw, Hermes, and Deep Agents Code images and the native multi-platform publication check.

Changes

• Update docs/changelog/2026-07-29.mdx under the existing ## v0.0.98 heading.
• Record the checksum-pinned Perl 5.44.0 packages and native linux/amd64 and linux/arm64 digest checks from #7864.
• Confirm that the other post-entry merges, #7868 and #7866, change E2E orchestration or tests without changing user-facing behavior.

Source Summary

• #7864 -> docs/changelog/2026-07-29.mdx: Record the reviewed Perl 5.44.0 packages and native multi-platform publication checks for managed OpenClaw, Hermes, and Deep Agents Code images.

Type of Change

• Code change (feature, bug fix, or refactor)
• Code change with doc updates
• Doc only (prose changes, no code sample modifications)
• Doc only (includes code sample changes)

Quality Gates

• Tests added or updated for changed behavior
• Existing tests cover changed behavior — justification: The merged source PR includes security-package, runtime, and publication tests. test/changelog-docs.test.ts validates the release-entry structure.
• Tests not applicable — justification:
• Docs updated for user-facing behavior changes
• Docs not applicable — justification:
• Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
• Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification:
• Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Documentation Writer Review

• Documentation writer subagent reviewed the completed changes
• Result: blocked
• Evidence: This side-conversation host does not permit subagents. The primary author reviewed docs/changelog/2026-07-29.mdx against WRITING.md, the controlled word list, and docs/CONTRIBUTING.md. The changelog contract passed 6 tests, and the docs build completed with 0 errors and 2 existing Fern warnings.
• Agent: Codex Desktop side conversation

DGX Station Hardware Evidence

• Tested on DGX Station
• Tested commit: Not applicable. scripts/prepare-dgx-station-host.sh is unchanged.
• Station profile/scenario: Not applicable.
• Result: Not applicable.
• Supporting evidence: Not applicable.

Verification

• PR description includes a Signed-off-by: line and every commit appears as Verified in GitHub
• Normal pre-commit, commit-msg, and pre-push hooks passed, or npm run validate:pr passed after refreshing origin/main when hooks were skipped or unavailable
• Targeted behavior tests pass for the current change set, or tests are marked not applicable above — npm exec -- vitest run test/changelog-docs.test.ts passed 6 tests.
• Applicable broad gate passed — npm test for broad runtime/test-harness changes; npm run check for repo-wide validation/coverage changes — command/result: Not run for this documentation-only change.
• Quality Gates section completed with required justifications or waivers
• No secrets, API keys, or credentials committed
• npm run docs builds without warnings (doc changes only) — The build completed with 0 errors and 2 existing Fern warnings.
• Doc pages follow the style guide (doc changes only)
• New doc pages include SPDX header and frontmatter (new pages only) — No new page was added.

---

Signed-off-by: Julie Yaunches jyaunches@nvidia.com

Summary by CodeRabbit

• Documentation
  • Updated the v0.0.98 changelog with expanded sandbox image security and provenance details.
  • Documented checksum-pinned Perl packages and reviewed dependency versions for supported sandbox images.
  • Clarified that multi-platform image tags are published only after architecture-specific digest validation.

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 6d0b6b41-e96f-4878-b298-e280cff15335

📥 Commits

Reviewing files that changed from the base of the PR and between 45d7e1a and 8e92d96.

📒 Files selected for processing (1)

• docs/changelog/2026-07-29.mdx

---

📝 Walkthrough

Walkthrough

The v0.0.98 changelog now documents reviewed, checksum-pinned Perl 5.44.0 packages, Hermes dependency pins, and digest validation requirements for multi-platform sandbox image tags.

Changes

Sandbox image provenance

Layer / File(s)	Summary
Document sandbox image provenance docs/changelog/2026-07-29.mdx	The changelog adds Perl 5.44.0 pinning for OpenClaw, Hermes, and Deep Agents Code images, platform digest validation requirements, and additional Hermes dependency pins.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• NVIDIA/NemoClaw#7873: Updates the same changelog entry with related Hermes and Deep Agents Code dependency pinning details.

Suggested labels: area: sandbox, area: security, integration: hermes, integration: dcode

Suggested reviewers: cv, aasthajh

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Fix failing CI checks

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/docs-v0.0.98-release-prep

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🌿 Preview your docs: https://nvidia-preview-pr-7910.docs.buildwithfern.com/nemoclaw

[github-actions]

PR Review Advisor — No blocking findings reported

Advisor assessment: No blocking advisor findings reported
Next action: No advisor follow-up needed.
Findings: 0 blockers · 0 warnings · 0 suggestions

Model lanes

• GPT-5.6 Terra (primary): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
• Nemotron 3 Ultra (second opinion): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
• Model comparison: normalized findings match; normalized E2E selections match; severity counts match.

Nemotron output stays in workflow artifacts and does not change the assessment above.

E2E guidance

Advisory only. E2E / PR Gate selects and runs jobs independently.

Recommended E2E: None

Workflow run details

This automated review informs maintainers. Warnings and suggestions do not require a response. A maintainer decides whether to merge.