NemoClaw — kernel sandbox for agents
NVIDIA’s NemoClaw surfaced as a kernel‑level security sandbox designed to contain rogue AI agents and protect secrets like API keys, with deployment notes for AWS/Bedrock and Claude. The tool is being positioned as a hardening layer for agentic systems that run models and call external APIs. (x.com) (geeky-gadgets.com)
NemoClaw has been published as an alpha preview since March 16, 2026, and NVIDIA’s quickstart page explicitly warns the software is alpha and not intended for production use. (docs.nvidia.com) NVIDIA’s official GitHub and documentation list first‑class support for inference providers such as OpenAI, Anthropic, Google Gemini, NVIDIA endpoints and Ollama. (github.com) A community request to add Amazon Bedrock as a first‑class inference provider was opened on March 26, 2026, indicating active demand for Bedrock integration. (github.com) The stack installs an OpenShell runtime and exposes policy‑driven sandbox controls for filesystem, network and process access; it also includes an articulated “Privacy Router” meant to route inference between local Nemotron models and cloud providers. (docs.nvidia.com) (nemoclawai.io) Supported install paths include a one‑line installer, Docker images and guided scripts for remote GPU deployment, with recommended platforms Ubuntu 22.04+, macOS via Colima/Docker Desktop, and Windows via WSL2 + Docker Desktop. (nemoclawai.io) NVIDIA and community docs note local on‑device inference requires GPUs and the NVIDIA Container Toolkit; example guidance lists Nemotron‑3‑nano (≈30B) at ~30GB VRAM and Nemotron‑3‑super (≈120B) at ~120GB VRAM for higher‑quality local models. (deepwiki.com) Community resources and third‑party writeups have proliferated since launch, including an “awesome‑NemoClaw” collection on GitHub and a migration report where Claude Opus 4.6 assisted a multi‑hour migration of a heavily customized OpenClaw deployment into NemoClaw. (github.com) (joshua8.ai) Trade coverage framed NemoClaw as NVIDIA’s enterprise security and deployment play for OpenClaw agents during recent GTC reporting, with outlets such as VentureBeat and BetterStack running analyses of the project’s goals and limitations. (venturebeat.com) (betterstack.com)
