Enterprise governance maturation

NemoClaw’s Nov. 6 release adds onboarding, network, and recovery changes: new managed vLLM containers use loopback/private-bridge bindings, provider attachment is sandbox-scoped, and recovery is more cautious. Existing containers keep old bindings until recreated; migration behavior remains unverified. NeMo Fabric’s OpenClaw adapter also highlights operational control details, but sandboxing does not resolve prompt injection or organization-wide RBAC.