NVIDIA just launched NemoClaw โ hardened sandboxes for OpenClaw agents with local Nemotron inference. AgentShift migrates your entire OpenClaw install in one command, any cloud.
pip install agentshift
NemoClaw wraps your OpenClaw agents in an OpenShell container with Landlock/seccomp isolation, deny-by-default network policies, and routed inference via NVIDIA Nemotron or any provider. AgentShift generates the workspace files, network policies, and cloud deploy scripts automatically.
All your skills, cron jobs, and workspace files โ migrated and ready to deploy.
Scans every skill, reads jobs.json, generates workspace files + network policies.
MIGRATION_REPORT.md tells you exactly what migrated, what needs manual steps, and what credentials to re-enter.
Paste userdata.sh into your EC2 launch config โ or run deploy.sh locally.
NemoClaw strips tokens for security. Run nemoclaw onboard to re-configure Telegram, Slack, GitHub.
Works with:
Not migrating the whole install? Convert just the skills you need.
7 parsers ยท 8 emitters. Adding a new platform = one parser + one emitter.
Every agent passes through a universal Intermediate Representation โ the core innovation that makes N-to-N conversion possible.
The agentshift diff command shows portability scores before you commit to a migration.
AgentShift tracks three layers of governance and tells you exactly what survives the move.
100% preserved. Safety rules, disclaimers, scope limits always transfer โ they live in the instructions.
37โ100% preserved depending on target. NemoClaw gets 100% via network policies. Bedrock gets 37%.
93.6% behaviorally equivalent via elevation. What can't be enforced natively becomes prompt-level rules.
agentshift compliance ./my-agent --from openclaw --framework eu-ai-act
EU AI Act audit โ checks Art. 9, 10, 13, 14, 52 ยท enforcement August 2026
One command. All your skills. Any cloud.
agentshift migrate --source ~/.openclaw --to nemoclaw --cloud aws