๐ŸŸข NVIDIA NemoClaw launched March 16 โ€” run OpenClaw agents in hardened sandboxes with local Nemotron inference. Migrate your agents โ†’
NemoClaw is here

Your OpenClaw agents,
anywhere they need to run.

NVIDIA just launched NemoClaw โ€” hardened sandboxes for OpenClaw agents with local Nemotron inference. AgentShift migrates your entire OpenClaw install in one command, any cloud.

pip install agentshift
Migrate to NemoClaw View on GitHub โ†—
New ยท March 16, 2026

NVIDIA NemoClaw: OpenClaw in a hardened sandbox

NemoClaw wraps your OpenClaw agents in an OpenShell container with Landlock/seccomp isolation, deny-by-default network policies, and routed inference via NVIDIA Nemotron or any provider. AgentShift generates the workspace files, network policies, and cloud deploy scripts automatically.

Migrate your entire install in one command

All your skills, cron jobs, and workspace files โ€” migrated and ready to deploy.

agentshift migrate
$ agentshift migrate --source ~/.openclaw --to nemoclaw --cloud aws --output ./migration
AgentShift migrate ~/.openclaw (openclaw) โ†’ nemoclaw (cloud: aws)
Migrating... โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”โ”

Migration complete!
  Skills: 14/14 migrated
  Cron jobs: 19/19 migrated
  Network policies: generated (12 unique endpoints)

โœ“ Output โ†’ ./migration/
  Report: ./migration/MIGRATION_REPORT.md
  Deploy: ./migration/deploy/aws/userdata.sh
$ cat ./migration/deploy/aws/userdata.sh
#!/usr/bin/env bash
curl -fsSL https://www.nvidia.com/nemoclaw.sh | bash
# Upload workspace + start sandbox...
Step 1

Run migrate

Scans every skill, reads jobs.json, generates workspace files + network policies.

Step 2

Review the report

MIGRATION_REPORT.md tells you exactly what migrated, what needs manual steps, and what credentials to re-enter.

Step 3

Deploy

Paste userdata.sh into your EC2 launch config โ€” or run deploy.sh locally.

Step 4

Re-enter credentials

NemoClaw strips tokens for security. Run nemoclaw onboard to re-configure Telegram, Slack, GitHub.

Works with:

--cloud aws --cloud gcp --cloud azure --cloud docker --cloud bare-metal

Or convert individual skills

Not migrating the whole install? Convert just the skills you need.

agentshift
$ agentshift convert ~/.openclaw/skills/github --from openclaw --to nemoclaw --output ./github-nemoclaw
โœ“ Converted github โ†’ ./github-nemoclaw

github-nemoclaw/
โ”œโ”€โ”€ workspace/
โ”‚   โ”œโ”€โ”€ SKILL.md
โ”‚   โ”œโ”€โ”€ SOUL.md
โ”‚   โ””โ”€โ”€ IDENTITY.md
โ”œโ”€โ”€ nemoclaw-config.yaml
โ”œโ”€โ”€ network-policy.yaml  (gh + git โ†’ github policy)
โ”œโ”€โ”€ deploy.sh
โ””โ”€โ”€ README.md
$ agentshift convert ./my-skill --from openclaw --to all
  โœ“ claude-code โ†’ ./output/claude-code/
  โœ“ copilot    โ†’ ./output/copilot/
  โœ“ bedrock    โ†’ ./output/bedrock/
  โœ“ m365       โ†’ ./output/m365/
  โœ“ vertex     โ†’ ./output/vertex/
  โœ“ nemoclaw   โ†’ ./output/nemoclaw/

Supported platforms

7 parsers ยท 8 emitters. Adding a new platform = one parser + one emitter.

OpenClaw
Parser Emitter
Works today
NVIDIA NemoClaw
Emitter
Works today ยท New
Claude Code
Parser Emitter
Works today
GitHub Copilot
Parser Emitter
Works today
AWS Bedrock
Parser Emitter
Works today
GCP Vertex AI
Parser Emitter
Works today
Microsoft 365
Emitter
Works today
AGENTS.md
Parser
60k+ repos
Salesforce Agentforce
Parser
Works today
Google A2A
Emitter
Works today
LangGraph
Emitter
Works today

How it works

Every agent passes through a universal Intermediate Representation โ€” the core innovation that makes N-to-N conversion possible.

Source
Parser
SKILL.md ยท CLAUDE.md ยท .agent.md
AGENTS.md ยท bot-meta.xml
Universal
IR
Identity ยท Tools ยท Knowledge
Triggers ยท Governance
Target
Emitter
NemoClaw ยท Claude Code
Copilot ยท Bedrock ยท M365 ยท Vertex

Know what ports โ€” and what doesn't

The agentshift diff command shows portability scores before you commit to a migration.

agentshift diff
$ agentshift diff ~/.openclaw/skills/github --from openclaw

Component       claude-code  copilot  bedrock  nemoclaw
─────────────────────────────────────────────
Instructions    โœ… 100%   โœ… 100%  โœ… 100%   โœ… 100%
Tools (shell)   โœ… Bash(*) โœ… term  โŒ stub   โœ… policy
─────────────────────────────────────────────
Portability      100%      92%    38%     95%

Governance-aware conversion

AgentShift tracks three layers of governance and tells you exactly what survives the move.

L1

Prompt guardrails

100% preserved. Safety rules, disclaimers, scope limits always transfer โ€” they live in the instructions.

L2

Tool permissions

37โ€“100% preserved depending on target. NemoClaw gets 100% via network policies. Bedrock gets 37%.

L3

Platform-native controls

93.6% behaviorally equivalent via elevation. What can't be enforced natively becomes prompt-level rules.

agentshift compliance ./my-agent --from openclaw --framework eu-ai-act

EU AI Act audit โ€” checks Art. 9, 10, 13, 14, 52 ยท enforcement August 2026

Migrate to NemoClaw today

One command. All your skills. Any cloud.

agentshift migrate --source ~/.openclaw --to nemoclaw --cloud aws
Star on GitHub โ†— NemoClaw guide