Description

Description:
The NemoClaw sandbox image does not include a brew (Homebrew). As a result, no process inside the sandbox can match the binary filter, and all requests to the allowed domains are blocked with HTTP 403.

[Environment]
Device: Ubuntu 24.04
Node.js: v22.22.2
npm: 10.9.7
Docker: Docker version 28.2.2
OpenShell CLI: 0.0.26
NemoClaw: v0.0.11

[Steps to Reproduce]

1. nemoclaw my-assistant policy-add → select "brew" → confirm
2. Verify: nemoclaw my-assistant policy-list → shows brew as ● (applied)
3. nemoclaw my-assistant connect
4. brew update

[Expected Result]
Step 4: Homebrew registry reachable (200/301), and brew binary exists and is executable.

[Actual Result]
sandbox@my-assistant:~$ brew update
bash: brew: command not found

[NVB# 6066204]

[NVB#6066204]