NVIDIA · apurvvkumaria · Jul 18, 2026 · Jul 18, 2026 · Jul 18, 2026 · Jul 18, 2026
diff --git a/docs/changelog/2026-07-17.mdx b/docs/changelog/2026-07-17.mdx
@@ -3,6 +3,32 @@
  * SPDX-License-Identifier: Apache-2.0
  */}
 
+## v0.0.87
+
+NemoClaw v0.0.87 adds bounded DGX Station factory-image qualification paths, makes managed Deep Agents Code startup restart-safe, and improves rebuild recovery, managed vLLM storage checks, sandbox backups, and strict-provider compatibility.
+
+- DGX Station Express recognizes the exact April 2026 NVIDIA Colossus BaseOS and June 2026 NVIDIA AI Developer Tools GB300 factory profiles for qualification.
+  The installer preserves each factory kernel, driver, Docker, and NVIDIA Container Toolkit stack, applies only the bounded access or runtime preparation required by that exact profile, and rejects identity, package, service, GPU, or runtime drift.
+  DGX Station remains Deferred while physical qualification continues.
+  For more information, refer to [Prepare DGX Station to Install NemoClaw](/user-guide/openclaw/get-started/prerequisites/dgx-station-preparation) and [Platform Support and Launch Claims](/user-guide/openclaw/reference/platform-support).
+- Managed Deep Agents Code onboarding now persists the `nemoclaw-dcode-entrypoint` startup command when the OpenShell Docker driver recreates a sandbox.
+  The recreated container also receives the required `nproc=512:512` and `nofile=65536:65536` limits, so the managed runtime remains available after a gateway restart without weakening its process and file-descriptor boundaries.
+  For more information, refer to [Security Best Practices](/user-guide/deepagents/security/best-practices).
+- Rebuild recovery verifies that a restored Hermes sandbox returns to healthy gateway and managed MCP state before reporting success.
+  OpenClaw rebuilds also clear stale managed-provider session pins after an inference switch, allowing restored sessions to use the current configured model while preserving intentional pins to other providers.
+  For more information, refer to [Recover and Rebuild Sandboxes](/user-guide/openclaw/manage-sandboxes/operate-sandboxes/recover-and-rebuild-sandboxes) and [Switch Inference Providers](/user-guide/openclaw/inference/manage-inference/switch-providers).
+- Managed vLLM storage preflight estimates cold image and model downloads from pinned image metadata and model payload sizes.
+  It checks Docker storage and the Hugging Face cache separately when they use different filesystems, rechecks capacity after a cold image pull, warns and continues during express or other non-interactive setup, and requires confirmation during interactive setup.
+  For more information, refer to [Set Up vLLM](/user-guide/openclaw/inference/local-inference/set-up-vllm).
+- Sandbox backup creation now streams archive data and validates entries incrementally instead of buffering the complete archive in host memory.
+  Large backups therefore retain the existing traversal checks and partial-state behavior without requiring memory proportional to the archive size.
+  For more information, refer to [Create and Restore Snapshots](/user-guide/openclaw/manage-sandboxes/state-and-backups/create-and-restore-snapshots).
+- Hermes registers NemoClaw tools with the single function-schema envelope required by strict OpenAI-compatible providers.
+  Google Gemini no longer rejects the managed Hermes tool list because of a nested schema, and audio transcription retains its declared parameters.
+  For more information, refer to [Use Google Gemini](/user-guide/hermes/inference/hosted-inference/use-google-gemini).
+- Replacement-image rebuild failures preserve bounded, redacted Docker diagnostics when process output arrives as buffered data, making host-specific build failures actionable without exposing credentials or private host paths.
+  For more information, refer to [Recover and Rebuild Sandboxes](/user-guide/openclaw/manage-sandboxes/operate-sandboxes/recover-and-rebuild-sandboxes).
+
 ## v0.0.86
 
 NemoClaw v0.0.86 enables the Station express recipe on qualified stock DGX OS GB300 systems, makes interrupted Station setup resumable, and fixes model validation, managed vLLM cache checks, sandbox builds, and upgrade guidance.

diff --git a/docs/get-started/dgx-station-preparation.mdx b/docs/get-started/dgx-station-preparation.mdx
@@ -16,7 +16,12 @@ Complete this preparation before following the Quickstart on a qualifying DGX St
 
 DGX Station GB300 express install accepts either the generic Ubuntu 24.04 ARM64 image or stock DGX OS `7.2.0`, `7.4.0`, or `7.5.0`.
 A stock DGX OS image qualifies only when a safe, root-owned `/etc/dgx-release` marker identifies `DGX Server for GALAXY-GB300`.
-An unknown version, malformed or unsafe marker, NVIDIA BaseOS image, or other Station generation stops before host preparation.
+NemoClaw also recognizes these exact no-OTA factory profiles for bounded qualification:
+
+- April 2026 NVIDIA Colossus BaseOS with `DGX_PRETTY_NAME=NVIDIA DGX Server`, `DGX_SWBUILD_VERSION=7.5.0-GB300ws-GB200ws`, and `DGX_SWBUILD_DATE=2026-04-02-08-20-16`.
+- June 2026 NVIDIA AI Developer Tools with `DGX_PRETTY_NAME=NVIDIA DGX GB300WS`, `DGX_SWBUILD_VERSION=7.5.0`, and `DGX_SWBUILD_DATE=2026-06-16-11-48-10`.
+
+An unknown version, malformed or unsafe marker, unmatched no-OTA factory image, or other Station generation stops before host preparation.
 On an unqualified system, set `NEMOCLAW_PROVIDER` or `NEMOCLAW_NO_EXPRESS=1` explicitly to continue without Station host automation.
 
 ## Prepare Generic Ubuntu
@@ -41,11 +46,13 @@ After changing pinned packages, the installer exits with status `10`; reboot, si
 
 ## Validate Stock DGX OS
 
-On a qualifying stock DGX OS image, express install validates the factory stack in place against the local default Docker daemon.
+On a qualifying stock DGX OS or exact no-OTA factory image, express install validates the factory stack in place against the local default Docker daemon.
 It requires a loaded GB300 driver with zero volatile corrected and uncorrected ECC errors, active Docker and containerd services, working Docker Buildx, `nvidia-ctk`, the `nvidia.com/gpu=all` CDI device, and successful `nvidia-smi` device-visibility probes through both CDI and `--gpus all`.
-This path does not install or replace host packages, enable or restart services, generate CDI configuration, or rewrite the Docker runtime.
+The stock DGX OS and AI Developer Tools paths do not install or replace host packages, enable or restart services, generate CDI configuration, or rewrite the Docker runtime.
+The Colossus BaseOS path requires the exact reviewed package and failed-service fingerprints, preserves the factory kernel, driver, DKMS, Docker, and NVIDIA Container Toolkit packages, and prepares only Docker access and packaged CDI.
+It registers the NVIDIA Docker runtime only when the launch probe proves that the runtime is missing, and it restores the prior daemon configuration if registration fails.
 The preparation helper writes a private audit log under `~/station-bootstrap-logs`.
-Aside from the installer's separately disclosed `docker`-group membership grant when the current trusted account needs Docker access, its only persistent stock-runtime effect is that the digest-pinned visibility-test image can remain in the Docker cache.
+Aside from the installer's separately disclosed `docker`-group membership grant when the current trusted account needs Docker access, the stock DGX OS and AI Developer Tools paths leave only the digest-pinned visibility-test image in the Docker cache.
 
 One physical DGX OS `7.5.0` GB300 validation completed with released OpenShell `0.0.85`, local Nemotron Ultra serving, sandbox `cuInit(0)`, and a Hermes write/read file-tool task.
 Repeat qualification from a clean host and CI coverage remain pending.

diff --git a/docs/manage-sandboxes/recover-rebuild-sandboxes.mdx b/docs/manage-sandboxes/recover-rebuild-sandboxes.mdx
@@ -100,6 +100,8 @@ $$nemoclaw <sandbox-name> rebuild
 
 <AgentOnly variant="openclaw">
 The rebuild command preserves the mounted workspace and registered policies while recreating the container.
+After state restoration, NemoClaw clears a session's stale model and provider pin when it still targets the managed `inference` provider but no longer matches the configured default model.
+The session then follows the current default selected through `inference set`, while sessions pinned to another provider remain unchanged.
 </AgentOnly>
 
 <AgentOnly variant="hermes">