feat(images): package and publish all-agent managed images

[ericksoa]

Summary

Package the dormant managed-bootstrap boundary into the OpenClaw, Hermes, and LangChain Deep Agents Code images and qualify exact managed-image artifacts for amd64 and arm64. Production runtime selection remains unsupported, so this slice does not advertise or activate buildless or Podman support.

Related Issue

Part of #7744.

Changes

• Compile and package the native bootstrap entrypoint, composed image runtime, startup hold, and complete inert capability union in all three supported agent images.
• Preserve each agent startup, application environment, corporate-CA, dashboard, messaging, and plugin behavior behind the dormant image-owned handoff.
• Build and directly exercise exact OpenClaw, Hermes, and DCode amd64 artifacts on pull requests.
• Publish amd64 and arm64 variants only after the matching all-agent validation and attestation evidence succeeds.
• Add bounded, sanitized managed-image failure diagnostics and exact publication-evidence verification.
• Keep central orchestration provider-neutral and production activation unavailable.

Type of Change

• Code change (feature, bug fix, or refactor)
• Code change with doc updates
• Doc only (prose changes, no code sample modifications)
• Doc only (includes code sample changes)

Quality Gates

• Tests added or updated for changed behavior
• Existing tests cover changed behavior — justification:
• Tests not applicable — justification:
• Docs updated for user-facing behavior changes
• Docs not applicable — justification:
• Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
• Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification: The reconstruction preserves the previously audited publication source while adapting it to the merged feat(onboard): add managed bootstrap image runtime #8045 ownership model. Exact-head CodeRabbit is green with zero unresolved threads, and the published advisor assessment reports no blocking findings.
• Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue: PR review advisor (GPT-5.6 Terra) and PR review advisor (Nemotron 3 Ultra) are accepted as mechanical service failures on exact-head attempt 2: Terra rejected an invalid service-generated max_output_tokens=1, while Nemotron returned no required analysis. The exact-head publisher reports 0 blockers, 0 warnings, 0 suggestions, and no follow-up needed; the primary advisor passed on the immediately preceding implementation head in run 30883374986. No code follow-up issue is warranted.

Documentation Writer Review

• Documentation writer subagent reviewed the completed changes
• Result: docs-updated
• Evidence: src/lib/onboard/managed-bootstrap/README.md documents the all-agent image-packaging boundary and explicitly keeps production onboarding inert. The exact-head qualification corrections change only private image construction and direct-E2E boundaries; public docs/ remain unchanged because this slice does not activate a user-visible runtime surface.
• Agent: Codex Desktop

DGX Station Hardware Evidence

• Tested on DGX Station
• Tested commit:
• Station profile/scenario:
• Result:
• Supporting evidence:

Verification

• Exact public head: 4af85d6f86a9db6ff201f75f31f94e75987a7410.
• Append-only repair: contaminated source head 6a1b8443a is preserved at backup/podman-stack/pr8047-contaminated-6a1b8443; reviewed clean source d656863ea is preserved at backup/podman-stack/pr8047-clean-d656863e.
• The qualification ancestry preserves the independently reviewed clean implementation. Exact-head corrections stage the canonical bootstrap envelope through root docker exec stdin, align SLSA dependency verification with BuildKit output, keep the fixed all-agent capability inventory independently asserted, and prove non-GHCR identity rejection occurs before any registry tool can run. The append-only public history incorporates current main at 453b5df0a0cd17e1f898c333a6c1583d96f51096; the exact-head tree is 4a3b61ec6a731babdcf01f19e469be7e00aff551, and the independently reviewed pre-correction clean source remains preserved at its backup ref.
• Current GitHub diff versus the PR base: 72 files, +5,966/-397; no Podman lifecycle or provider implementation files.
• Changed integration set: 29 files, 491 passing tests, 48 expected skips.
• Changed CLI set: 3 files, 68 passing tests.
• Focused exact-head remediation set: 3 suites, 126 passing tests.
• Composed managed-bootstrap runtime bundles successfully; shell boundaries parse; local no-added-test-conditionals, test-size, source-shape, repository, Biome, hadolint, shellcheck, secret-scan, signed-DCO, and pre-push gates pass.
• PR description includes a Signed-off-by line and every new reconstruction commit is signed; GitHub verification is checked on the pushed head.
• Normal pre-commit, commit-msg, and pre-push hooks passed.
• Targeted behavior tests pass for the current change set.
• Applicable broad gate passed — exact-head CI, all-agent managed-image builds, CodeQL, CodeRabbit, and the published advisor assessment pass; all 22 executed jobs for the 17 protected E2E selections passed with no skips or pending tests.
• Quality Gates section completed with required justifications or waivers
• No secrets, API keys, or credentials committed
• npm run docs builds without warnings (doc changes only)
• Doc pages follow the style guide (doc changes only)
• New doc pages include SPDX header and frontmatter (new pages only)

---

Signed-off-by: Aaron Erickson aerickson@nvidia.com

Summary by CodeRabbit

• New Features

  • Added managed startup support across OpenClaw, Hermes, and LangChain Deep Agents Code.
  • Added configurable runtime identity and bundled capability support.
  • Added amd64 and arm64 image validation with direct startup checks.

• Bug Fixes

  • Prevented unsupported integrations from activating unexpectedly.
  • Improved certificate handling, environment cleanup, permissions, and startup reliability.

• Chores

  • Strengthened image publication verification, diagnostics, run isolation, and promotion safeguards.
  • Expanded validation for security, configuration, attestations, and image integrity.