chore(deps): trust OpenClaw 2026.9.5 manifests

[nvidia-nemopatch-writer]

Outcome

Adds reviewed OpenClaw 2026.9.5 archive and replacement-graph identities while preserving the selected 2026.9.2 runtime and its existing trust entries.

Reason

The runtime migration in #12382 needs verified package identities and a reviewed replacement graph before selecting 2026.9.5. This PR stages that policy without changing the production runtime.

Changes

• Preserve current runtime identities and security overrides; add the 2026.9.5 runtime, official channels (including Google Chat), Brave, Tavily, and diagnostics archives.
• Bind the replacement runtime graph to the actual 2026.9.5 lockfile digest and exercise the checked-in policy with that lock fixture.
• Document the staged transition, its removal condition, and the existing candidate-owned audit boundary accurately.
• Refresh genuine AMD64/ARM64 Pi qualification receipts and their exact authority hashes from run 37520336741, attempt 1. The full receipt gate verifies matching image inputs.

Verification

• Current candidate: 12b1ae63f10dbbbe17207ea059c4a9df16f048b9. It includes main’s MCP SDK security repair, corrected archive inputs, and genuine source-matching AMD64/ARM64 Pi receipts from run 37520336741, attempt 1.
• Full normal signed-commit and publication hooks passed, including CLI typecheck and the Pi receipt gate. GitHub verifies the published signature. No secrets, API keys, or credentials were added.
• Current CI passed, including the real OpenClaw distribution tests and npm audits.
• Current Advisor passed. All nine complete specialist reports were collected and reviewed; there are no blocking findings.
• Managed-image evaluation, attempt 2 passed. The authorized single Docker activation retry completed all three managed agents, 28 native agent turns, stop/start and durable-state checks, exact public-image adoption/rebuild, and cleanup with no failures. The authenticated artifact binds the runtime result to this exact candidate. The original Hermes image-download failure remains retained as historical attempt-1 evidence.
• Full trusted manual E2E run 37564477057 completed with failure for 12b1ae63f10dbbbe17207ea059c4a9df16f048b9, with empty selectors and the authorized Brev Launchable lane. Its authenticated dispatch receipt records base 24a38a6bd34474247b2cfe55112d149dbb483ea4 and trusted workflow 2306bc5f49c7a2f2697e9dfc781b5f4d21dc3580. The run has 76 successful jobs, four failed leaf jobs plus the failed aggregate, and 13 skipped jobs. Failed lanes: Deep Agents repository onboarding, OpenClaw inference-switch, protected GPU qualification, and Brev Launchable. The first two have matching failures on main and unchanged relevant source; their complete current-run audits remain in progress. The protected job failed before runtime startup: the trusted controller accepts OpenClaw lock SHA-256 b44c7f475fe36a378ebc078dbf068bd225f8470002834ce1308872049213b633, while this candidate contains a577575ac9d6821fe5b75b896de2ec4dc1661ce0da369b86666c0ebe6fec19d6. The trusted identity selector reproduces this rejection locally. Main’s fix(inference): use completion token limits for GPT-6 probes #12691 updated the SDK requested-version metadata; this candidate needs that dependency before another qualification run. No audit policy was weakened or rerun dispatched. The Launchable producer succeeded and exact candidate boot provenance passed. Its full test failed at full-e2e.test.ts:284: the gateway restart after native plugin installation returned a health timeout. Sandbox cleanup and final Brev workspace absence were verified. Relevant source is unchanged from the PR base, but available main Launchable runs failed during image production and cannot establish a matching runtime failure. The cause and relevance remain under review; this is not a passing full qualification.

Review notes

Self-review covered archive identities, replacement lock provenance, genuine Pi receipt parity, and the documentation boundary. The existing candidate-owned audit design was adopted by merged PR #12507; this upgrade does not change that ownership. The current Advisor result is clear. Independent approval and successful final live qualification remain pending.

This remains a draft. CodeRabbit is deferred at the user's direction; no merge is authorized.

---

Signed-off-by: Prekshi Vyas prekshiv@nvidia.com

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: NVIDIA/NemoClaw/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: b35aa805-9f96-409d-96c0-ad70dc09f0b8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-code-quality]

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/plugin

The overall line coverage in commit 12b1ae6 in the nemopatch/openclaw-u... branch is 97%. The line coverage in commit 63002cd in the main branch is 96%.

Show a line coverage summary of the most impacted files.

File	main 63002cd	nemopatch/openclaw-u... 12b1ae6	+/-
nemoclaw/src/onboard/config.ts	98%	96%	-2%
nemoclaw/src/index.ts	94%	93%	-1%
nemoclaw/src/bl...t-management.ts	100%	100%	0%
nemoclaw/src/co.../config-show.ts	100%	100%	0%
nemoclaw/src/commands/slash.ts	100%	100%	0%
nemoclaw/src/on...native-route.ts	0%	100%	+100%

TypeScript / code-coverage/cli

The overall line coverage in commit 12b1ae6 in the nemopatch/openclaw-u... branch is 85%. The line coverage in commit 63002cd in the main branch is 84%.

Show a line coverage summary of the most impacted files.

File	main 63002cd	nemopatch/openclaw-u... 12b1ae6	+/-
src/lib/state/s...tory-restore.ts	86%	0%	-86%
src/lib/actions.../status-text.ts	84%	46%	-38%
src/lib/state/sandbox.ts	92%	83%	-9%
src/lib/onboard...al-inference.ts	84%	90%	+6%
src/lib/policy/index.ts	71%	79%	+8%
src/lib/state/p...l-retirement.ts	79%	92%	+13%
src/lib/onboard.../application.ts	55%	72%	+17%
src/lib/adapter...gnostics-cli.ts	0%	87%	+87%
src/lib/onboard...ternal-image.ts	0%	94%	+94%
src/lib/securit...ig-structure.ts	0%	98%	+98%

---

_{Updated October 06, 2026 20:46 UTC}

[prekshivyas]

@coderabbitai review

[prekshivyas]

@coderabbitai review

[prekshivyas]

@coderabbitai review

[coderabbitai]

⚠️ Action not completed

Review skipped.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[github-actions]

PR Review Advisor finished for commit 12b1ae6. Include the Advisor findings in the complete PR feedback collection. Verify and group valid findings before repair.

Request review only when Require no Advisor blockers is green.

All previous runs