docs: update v0.0.96 release entry

[cv]

Summary

docs/changelog/2026-07-25.mdx now updates the v0.0.96 release entry for the state-lock fix that merged after #7564.
The entry identifies the first-boot sessions carveout behavior and links to Security Best Practices without claiming that the separate legacy credentials symptom is fixed.

Changes

• #7602 -> docs/changelog/2026-07-25.mdx: Document the first-boot agents/<id>/sessions/ carveout fix in the v0.0.96 release entry and link to the deeper security guidance.

Type of Change

• Code change (feature, bug fix, or refactor)
• Code change with doc updates
• Doc only (prose changes, no code sample modifications)
• Doc only (includes code sample changes)

Quality Gates

• Tests added or updated for changed behavior
• Existing tests cover changed behavior — justification:
• Tests not applicable — justification: This PR changes release-entry prose only. The changelog contract test and Fern validation cover the dated entry, route, and rendering requirements.
• Docs updated for user-facing behavior changes
• Docs not applicable — justification:
• Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
• Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification:
• Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Documentation Writer Review

• Documentation writer subagent reviewed the completed changes
• Result: docs-updated
• Evidence: At exact PR head f445009d2, a Codex Desktop documentation writer reviewed docs/changelog/2026-07-25.mdx against WRITING.md and docs/CONTRIBUTING.md. The review confirmed the source claim matches fix(state): create the missing sessions carveout during state-dir lock #7602, limits the release meaning to the first-boot sessions-directory EACCES path, uses the specific published Security Best Practices route, and changes no code samples or skip terms. The changelog test passed 6/6, and the docs build completed with 0 errors and 2 unrelated repository warnings.
• Agent: Codex Desktop

DGX Station Hardware Evidence

• Tested on DGX Station
• Tested commit:
• Station profile/scenario:
• Result:
• Supporting evidence:

Verification

• PR description includes a Signed-off-by: line and every commit appears as Verified in GitHub
• Normal pre-commit, commit-msg, and pre-push hooks passed, or npm run check:diff passed when hooks were skipped or unavailable
• Targeted behavior tests pass for the current change set, or tests are marked not applicable above — command/result or justification: npx vitest run test/changelog-docs.test.ts passed 6/6 tests.
• Applicable broad gate passed — npm test for broad runtime/test-harness changes; npm run check for repo-wide validation/coverage changes — command/result:
• Quality Gates section completed with required justifications or waivers
• No secrets, API keys, or credentials committed
• npm run docs builds without warnings (doc changes only) — exited 0 with 0 errors and 2 unrelated repository warnings.
• Doc pages follow the style guide (doc changes only)
• New doc pages include SPDX header and frontmatter (new pages only)

---

Signed-off-by: Carlos Villela cvillela@nvidia.com

Summary by CodeRabbit

• Documentation
  • Expanded the v0.0.96 changelog with details on first-boot sandbox handling and prevention of permission errors.
  • Clarified CLI error behavior, exit statuses, configuration guidance, and messaging safeguards.
  • Added a Security Best Practices reference to the supporting documentation links.

[coderabbitai]

📝 Walkthrough

Walkthrough

The v0.0.96 changelog now documents first-boot session carveout creation, CLI exit-code and error-output behavior, messaging mutation guidance, and an additional Security Best Practices reference.

Changes

Changelog documentation

Layer / File(s)	Summary
Sandbox and CLI behavior notes docs/changelog/2026-07-25.mdx	Documents creation of the writable agents/<id>/sessions/ carveout, consolidated CLI failure behavior, configuration guidance, exact messaging commands, and the Security Best Practices link.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• NVIDIA/NemoClaw#7295: Updates messaging mutation guards with actionable host-side commands.
• NVIDIA/NemoClaw#7564: Modifies the same v0.0.96 changelog entry.
• NVIDIA/NemoClaw#7602: Implements session carveout creation during sandbox locking.

Suggested labels: security

Suggested reviewers: prekshivyas, cjagwani

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the documentation-only changelog update for the v0.0.96 release entry.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/docs-v0.0.96-follow-up

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🌿 Preview your docs: https://nvidia-preview-pr-7607.docs.buildwithfern.com/nemoclaw

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@docs/changelog/2026-07-25.mdx`:
- Around line 32-38: Rewrite the new changelog sentences in the documented
active, second-person, present-tense voice: address the reader directly and
describe the outcomes using “you.” Update the sentences beginning with “NemoClaw
creates,” “Shields failures return,” and “A config set confirmation,” while
preserving their technical meaning and existing links.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: ace4f162-0a8a-445d-8402-10ef53a2310e

📥 Commits

Reviewing files that changed from the base of the PR and between 0b18549 and f445009.

📒 Files selected for processing (1)

• docs/changelog/2026-07-25.mdx

[github-actions]

PR Review Advisor — No blocking findings reported

Advisor assessment: No blocking advisor findings reported
Next action: No advisor follow-up needed.
Findings: 0 blockers · 0 warnings · 0 suggestions

Model lanes

• GPT-5.6 Terra (primary): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
• Nemotron 3 Ultra (second opinion): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
• Model comparison: normalized findings match; normalized E2E selections match; severity counts match.

Nemotron output stays in workflow artifacts and does not change the assessment above.

E2E guidance

Advisory only. E2E / PR Gate selects and runs jobs independently.

Recommended E2E: None

Workflow run details

This automated review informs maintainers. Warnings and suggestions do not require a response. A maintainer decides whether to merge.