[DGX Spark][Ubuntu 24.04] Sandbox deletion leaves stale providers causing onboard --resume to fail

### Description

When NemoClaw recreates a sandbox during onboarding, it deletes the sandbox container but leaves associated messaging providers (Telegram bridge, Brave Search) attached in the OpenShell gateway. The subsequent provider creation step then fails with a FailedPrecondition error.

## Expected Behavior
Sandbox deletion should automatically detach or delete associated providers before the sandbox container is removed.

## Actual Behavior
Providers remain attached after sandbox deletion, blocking recreation on every subsequent onboard attempt.

## Workaround
```bash
openshell provider delete <sandbox-name>-telegram-bridge --yes
openshell provider delete <sandbox-name>-brave-search --yes
nemoclaw onboard --resume
```

## Impact
This occurs on every upgrade that requires a sandbox rebuild, making routine updates significantly more painful than they should be.

### Reproduction Steps

1. Run `nemoclaw onboard` on a system with an existing sandbox
2. Allow it to proceed to step [6/8] Creating sandbox
3. NemoClaw deletes the existing sandbox
4. Onboarding fails with:

error /home/user/.nemoclaw/source/nemoclaw-blueprint/provider-profiles/brave.yaml profile=brave field=id custom provider profile 'brave' already exists

Error: × status: FailedPrecondition, message: "provider 'spark-nemo-telegram-bridge' is attached to sandbox(es): spark-nemo"


### Environment

- NemoClaw: v0.0.55
- Hardware: NVIDIA DGX Spark (aarch64)
- OS: Ubuntu 24.04

### Debug Output

═══ System ═══

Sat Jun  6 02:28:57 AM EDT 2026
Linux spark-2c8e 6.17.0-1018-nvidia #18-Ubuntu SMP PREEMPT_DYNAMIC Tue May  5 21:28:33 UTC 2026 aarch64 aarch64 aarch64 GNU/Linux
 02:28:57 up 11 days,  3:13,  6 users,  load average: 0.12, 0.33, 0.43
               total        used        free      shared  buff/cache   available
Mem:          124610      118693        3585         105        3557        5916
Swap:          16383        4530       11853

═══ Processes ═══

    PID    PPID CMD                         %MEM %CPU
2523620 2381644 node /home/slangelotti/.nvm  0.0 92.0
 284135  283781 VLLM::EngineCore             0.8  9.0
2410018 2409159 openclaw                     0.3  1.6
2408775 2408687 /opt/openshell/bin/openshel  0.0  0.3
 276669       1 /home/slangelotti/.local/bi  0.0  0.2
   4009       1 ollama serve                 0.0  0.2
 283781  283758 /usr/bin/python3 /usr/local  0.1  0.1
   2117       1 /usr/sbin/tailscaled --stat  0.0  0.1
   1558       1 avahi-daemon: running [spar  0.0  0.1
   2335       1 /usr/bin/dockerd -H fd:// -  0.0  0.1
3878519 3878517 python3 gmail_api.py         0.0  0.1
   2145       1 /usr/bin/containerd          0.0  0.1
    149       2 [kcompactd0]                 0.0  0.1
     15       2 [rcu_preempt]                0.0  0.0
   1694       1 /usr/sbin/NetworkManager --  0.0  0.0
   7790       1 /usr/libexec/fwupd/fwupd     0.0  0.0
2453843 2446891 node /home/slangelotti/.nvm  0.0  0.0
2408687       1 /usr/bin/containerd-shim-ru  0.0  0.0
2454948 2446891 node /home/slangelotti/.nvm  0.0  0.0
   1322       2 [napi/phy0-0]                0.0  0.0
      1       0 /sbin/init splash            0.0  0.0
   1560       1 @dbus-daemon --system --add  0.0  0.0
2453731 2446891 node /home/slangelotti/.nvm  0.0  0.0
2381643 2381448 sshd: slangelotti@pts/0      0.0  0.0
    556       2 [jbd2/nvme0n1p2-8]           0.0  0.0
   1321       2 [napi/phy0-0]                0.0  0.0
2519827       2 [kworker/0:2-events]         0.0  0.0
    627       1 /usr/lib/systemd/systemd-jo  0.0  0.0
2412852       1 /home/slangelotti/.local/bi  0.0  0.0

═══ GPU ═══

Sat Jun  6 02:28:57 2026       
+-----------------------------------------------------------------------------------------+
| NVIDIA-SMI 580.159.03             Driver Version: 580.159.03     CUDA Version: 13.0     |
+-----------------------------------------+------------------------+----------------------+
| GPU  Name                 Persistence-M | Bus-Id          Disp.A | Volatile Uncorr. ECC |
| Fan  Temp   Perf          Pwr:Usage/Cap |           Memory-Usage | GPU-Util  Compute M. |
|                                         |                        |               MIG M. |
|=========================================+========================+======================|
|   0  NVIDIA GB10                    On  |   0000000F:01:00.0 Off |                  N/A |
| N/A   41C    P0             10W /  N/A  | Not Supported          |      0%      Default |
|                                         |                        |                  N/A |
+-----------------------------------------+------------------------+----------------------+

+-----------------------------------------------------------------------------------------+
| Processes:                                                                              |
|  GPU   GI   CI              PID   Type   Process name                        GPU Memory |
|        ID   ID                                                               Usage      |
|=========================================================================================|
|    0   N/A  N/A          284135      C   VLLM::EngineCore                      11230... |
+-----------------------------------------------------------------------------------------+

═══ Docker ═══

CONTAINER ID   IMAGE                               COMMAND                  CREATED             STATUS                         PORTS                                         NAMES
b5e12bfd3428   openshell/sandbox-from:1780723574   "/opt/openshell/bin/…"   About an hour ago   Up About an hour (unhealthy)                                                 openshell-spark-nemo-70111da9-b1c0-420a-8ca2-4f0b8ae7dba6
50a877dc10ff   vllm/vllm-openai:v0.18.1-cu130      "vllm serve --model …"   10 days ago         Up 10 days                     0.0.0.0:8000->8000/tcp, [::]:8000->8000/tcp   vllm-super
CONTAINER ID   NAME                                                        CPU %     MEM USAGE / LIMIT     MEM %     NET I/O           BLOCK I/O         PIDS
b5e12bfd3428   openshell-spark-nemo-70111da9-b1c0-420a-8ca2-4f0b8ae7dba6   0.81%     456.5MiB / 91GiB      0.49%     9.24MB / 5.65MB   13.9MB / 22.9MB   52
50a877dc10ff   vllm-super                                                  2.68%     1.444GiB / 121.7GiB   1.19%     157MB / 176MB     11.1GB / 5.55GB   178

═══ OpenShell ═══

Server Status

  Gateway: nemoclaw
  Server: http://127.0.0.1:8080
  Status: Connected
  Version: 0.0.44
NAME        CREATED              PHASE
spark-nemo  2026-06-06 05:26:51  Ready
Sandbox:

  Id: 70111da9-b1c0-420a-8ca2-4f0b8ae7dba6
  Name: spark-nemo
  Phase: Ready
  Resource version: 69
  Policy source: sandbox
  Revision: 6

Policy:

  version: 1
  filesystem_policy:
    include_workdir: true
    read_only:
    - /usr
    - /lib
    - /dev/urandom
    - /app
    - /etc
    - /var/log
    - /run/nvidia-persistenced
    read_write:
    - /tmp
    - /dev/null
    - /sandbox/.openclaw
    - /sandbox/.nemoclaw
    - /home/linuxbrew
    - /proc
    - /sandbox
    - /dev/nvidiactl
    - /dev/nvidia-uvm
    - /dev/nvidia-uvm-tools
    - /dev/nvidia-modeset
    - /dev/nvidia0
  landlock:
    compatibility: best_effort
  process:
    run_as_user: sandbox
    run_as_group: sandbox
  network_policies:
    brave:
      name: brave
      endpoints:
      - host: api.search.brave.com
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
        - allow:
            method: POST
            path: /**
      binaries:
      - path: /usr/local/bin/node
      - path: /usr/bin/node
      - path: /usr/bin/curl
    brew:
      name: brew
      endpoints:
      - host: formulae.brew.sh
        port: 443
        tls: skip
        access: full
      - host: github.com
        port: 443
        tls: skip
        access: full
      - host: ghcr.io
        port: 443
        tls: skip
        access: full
      - host: pkg-containers.githubusercontent.com
        port: 443
        tls: skip
        access: full
      - host: objects.githubusercontent.com
        port: 443
        tls: skip
        access: full
      - host: raw.githubusercontent.com
        port: 443
        tls: skip
        access: full
      binaries:
      - path: /usr/bin/curl
      - path: /usr/bin/git
      - path: /usr/local/bin/brew
      - path: /home/linuxbrew/.linuxbrew/bin/brew
      - path: /home/linuxbrew/.linuxbrew/bin/*
      - path: /home/linuxbrew/.linuxbrew/Homebrew/bin/*
    clawhub:
      name: clawhub
      endpoints:
      - host: clawhub.ai
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
        - allow:
            method: POST
            path: /**
      binaries:
      - path: /usr/local/bin/openclaw
      - path: /usr/local/bin/node
    github:
      name: github
      endpoints:
      - host: github.com
        port: 443
        access: full
      - host: api.github.com
        port: 443
        access: full
      binaries:
      - path: /usr/bin/git
    gmail_api:
      name: gmail_api
      endpoints:
      - host: host.openshell.internal
        port: 8765
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
        allowed_ips:
        - '10.0.0.0/8'
        - '172.16.0.0/12'
        - '192.168.0.0/16'
      binaries:
      - path: /usr/local/bin/openclaw
      - path: /usr/local/bin/node
      - path: /usr/bin/curl
      - path: /usr/bin/python3
    huggingface:
      name: huggingface
      endpoints:
      - host: huggingface.co
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
      - host: cdn-lfs.huggingface.co
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
      - host: router.huggingface.co
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
        - allow:
            method: POST
            path: /**
      binaries:
      - path: /usr/local/bin/python3
      - path: /usr/local/bin/node
    local_inference:
      name: local_inference
      endpoints:
      - host: host.openshell.internal
        port: 11434
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
        - allow:
            method: POST
            path: /**
        allowed_ips:
        - '10.0.0.0/8'
        - '172.16.0.0/12'
        - '192.168.0.0/16'
      - host: host.openshell.internal
        port: 11435
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
        - allow:
            method: POST
            path: /**
        allowed_ips:
        - '10.0.0.0/8'
        - '172.16.0.0/12'
        - '192.168.0.0/16'
      - host: host.openshell.internal
        port: 8000
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
        - allow:
            method: POST
            path: /**
        allowed_ips:
        - '10.0.0.0/8'
        - '172.16.0.0/12'
        - '192.168.0.0/16'
      binaries:
      - path: /usr/local/bin/openclaw
      - path: /usr/local/bin/node
      - path: /usr/bin/node
      - path: /usr/bin/curl
      - path: /usr/bin/python3
    managed_inference:
      name: managed_inference
      endpoints:
      - host: inference.local
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
        - allow:
            method: POST
            path: /**
      binaries:
      - path: /usr/local/bin/openclaw
      - path: /usr/local/bin/node
      - path: /usr/bin/node
      - path: /usr/bin/curl
      - path: /usr/bin/python3
    npm_registry:
      name: npm_registry
      endpoints:
      - host: registry.npmjs.org
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
      binaries:
      - path: /usr/local/bin/openclaw
    npm_yarn:
      name: npm_yarn
      endpoints:
      - host: registry.npmjs.org
        port: 443
        tls: skip
        access: full
      - host: registry.yarnpkg.com
        port: 443
        tls: skip
        access: full
      binaries:
      - path: /usr/local/bin/npm*
      - path: /usr/local/bin/npx*
      - path: /usr/local/bin/node*
      - path: /usr/local/bin/yarn*
      - path: /usr/bin/npm*
      - path: /usr/bin/node*
    nvidia:
      name: nvidia
      endpoints:
      - host: integrate.api.nvidia.com
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: POST
            path: /v1/chat/completions
        - allow:
            method: POST
            path: /v1/completions
        - allow:
            method: POST
            path: /v1/embeddings
        - allow:
            method: GET
            path: /v1/models
        - allow:
            method: GET
            path: /v1/models/**
      - host: inference-api.nvidia.com
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: POST
            path: /v1/chat/completions
        - allow:
            method: POST
            path: /v1/completions
        - allow:
            method: POST
            path: /v1/embeddings
        - allow:
            method: GET
            path: /v1/models
        - allow:
            method: GET
            path: /v1/models/**
      binaries:
      - path: /usr/local/bin/openclaw
    openclaw_api:
      name: openclaw_api
      endpoints:
      - host: openclaw.ai
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
        - allow:
            method: POST
            path: /**
      binaries:
      - path: /usr/local/bin/openclaw
      - path: /usr/local/bin/node
    openclaw_docs:
      name: openclaw_docs
      endpoints:
      - host: docs.openclaw.ai
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
      binaries:
      - path: /usr/local/bin/openclaw
    pypi:
      name: pypi
      endpoints:
      - host: pypi.org
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
        - allow:
            method: HEAD
            path: /**
      - host: files.pythonhosted.org
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /**
        - allow:
            method: HEAD
            path: /**
      binaries:
      - path: /usr/bin/python3*
      - path: /usr/bin/pip*
      - path: /usr/local/bin/python3*
      - path: /usr/local/bin/pip*
      - path: /sandbox/.venv/bin/python*
      - path: /sandbox/.venv/bin/pip*
      - path: /sandbox/.uv/python/**/python*
      - path: /sandbox/.local/bin/pip*
    telegram_bot:
      name: telegram_bot
      endpoints:
      - host: api.telegram.org
        port: 443
        protocol: rest
        enforcement: enforce
        rules:
        - allow:
            method: GET
            path: /bot<REDACTED>/**
        - allow:
            method: POST
            path: /bot<REDACTED>/**
        - allow:
            method: GET
            path: /file/bot<REDACTED>/**
      binaries:
      - path: /usr/local/bin/node
      - path: /usr/bin/node
[1780727102.964] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727103.012] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=24822b47-d42d-48ac-8253-108a5bddf0d5, target=unix:/run/openshell/ssh.sock)]
[1780727104.340] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727104.467] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727104.467] [gateway] [INFO ] [openshell_server::grpc::sandbox] ExecSandbox (relay): command started
[1780727104.339] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=17b616d5-3523-4e5a-b7c1-9331ee78797e, target=unix:/run/openshell/ssh.sock)]
[1780727104.340] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727104.349] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727104.350] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727104.398] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=17b616d5-3523-4e5a-b7c1-9331ee78797e, target=unix:/run/openshell/ssh.sock)]
[1780727104.466] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=6575dc73-2356-4de0-9298-5dbc6ef738ff, target=unix:/run/openshell/ssh.sock)]
[1780727104.466] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727104.512] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727104.512] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727104.535] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780727104.535] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=GET path=/v1/models protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780727104.621] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=6575dc73-2356-4de0-9298-5dbc6ef738ff, target=unix:/run/openshell/ssh.sock)]
[1780727106.878] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727107.064] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727106.878] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=dbea27cb-f823-4004-a493-99a7973e337a, target=unix:/run/openshell/ssh.sock)]
[1780727106.878] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727106.932] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727106.932] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727106.985] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=dbea27cb-f823-4004-a493-99a7973e337a, target=unix:/run/openshell/ssh.sock)]
[1780727107.064] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=9311b052-a507-4a64-988f-8d0f460759a8, target=unix:/run/openshell/ssh.sock)]
[1780727107.064] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727107.244] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727107.155] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727107.155] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727107.244] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=9311b052-a507-4a64-988f-8d0f460759a8, target=unix:/run/openshell/ssh.sock)]
[1780727107.244] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=ee96cd60-5575-44c9-a278-b442874178f9, target=unix:/run/openshell/ssh.sock)]
[1780727107.244] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727107.298] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727107.299] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727107.349] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=ee96cd60-5575-44c9-a278-b442874178f9, target=unix:/run/openshell/ssh.sock)]
[1780727110.686] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED /usr/local/bin/node(484) -> api.telegram.org:443 [policy:telegram_bot engine:opa]
[1780727110.785] [sandbox] [OCSF ] [ocsf] HTTP:POST [INFO] ALLOWED POST http://api.telegram.org:443/bot<REDACTED>/getUpdates [policy:telegram_bot engine:l7]
[1780727113.405] [sandbox] [OCSF ] [ocsf] HTTP:GET [INFO] ALLOWED GET http://api.telegram.org:443/bot<REDACTED>/getMe [policy:telegram_bot engine:l7]
[1780727133.684] [sandbox] [OCSF ] [ocsf] HTTP:GET [INFO] ALLOWED GET http://api.telegram.org:443/bot<REDACTED>/getMe [policy:telegram_bot engine:l7]
[1780727141.407] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED /usr/local/bin/node(484) -> api.telegram.org:443 [policy:telegram_bot engine:opa]
[1780727141.500] [sandbox] [OCSF ] [ocsf] HTTP:POST [INFO] ALLOWED POST http://api.telegram.org:443/bot<REDACTED>/getUpdates [policy:telegram_bot engine:l7]
[1780727162.466] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727162.466] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=1f64dd24-2502-4d60-82eb-f11caa80eb6e, target=unix:/run/openshell/ssh.sock)]
[1780727162.466] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727162.519] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727162.519] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727162.567] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=1f64dd24-2502-4d60-82eb-f11caa80eb6e, target=unix:/run/openshell/ssh.sock)]
[1780727162.659] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727162.659] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=a4803017-1706-4cc3-849f-fe0411a8153a, target=unix:/run/openshell/ssh.sock)]
[1780727162.659] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727162.713] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727162.713] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727162.760] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=a4803017-1706-4cc3-849f-fe0411a8153a, target=unix:/run/openshell/ssh.sock)]
[1780727163.843] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727164.044] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727164.044] [gateway] [INFO ] [openshell_server::grpc::sandbox] ExecSandbox (relay): command started
[1780727163.843] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=7422a44d-0218-4240-8cc4-fbeaf30b2b42, target=unix:/run/openshell/ssh.sock)]
[1780727163.843] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727163.853] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727163.854] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727163.901] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=7422a44d-0218-4240-8cc4-fbeaf30b2b42, target=unix:/run/openshell/ssh.sock)]
[1780727164.043] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=32b90b1a-887e-468c-b55d-a10234c85f5b, target=unix:/run/openshell/ssh.sock)]
[1780727164.044] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727164.088] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727164.088] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727164.106] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780727164.106] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=GET path=/v1/models protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780727164.191] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=32b90b1a-887e-468c-b55d-a10234c85f5b, target=unix:/run/openshell/ssh.sock)]
[1780727164.691] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED /usr/local/bin/node(484) -> api.telegram.org:443 [policy:telegram_bot engine:opa]
[1780727164.780] [sandbox] [OCSF ] [ocsf] HTTP:GET [INFO] ALLOWED GET http://api.telegram.org:443/bot<REDACTED>/getMe [policy:telegram_bot engine:l7]
[1780727165.811] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727166.000] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727165.811] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=9aba3b6d-ec28-4493-aa66-7f14346db118, target=unix:/run/openshell/ssh.sock)]
[1780727165.811] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727165.858] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727165.858] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727165.905] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=9aba3b6d-ec28-4493-aa66-7f14346db118, target=unix:/run/openshell/ssh.sock)]
[1780727166.000] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=e80a5849-1605-4d91-bbf1-039d0258b9c8, target=unix:/run/openshell/ssh.sock)]
[1780727166.000] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727166.055] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727166.055] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727166.102] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=e80a5849-1605-4d91-bbf1-039d0258b9c8, target=unix:/run/openshell/ssh.sock)]
[1780727166.177] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727166.176] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=37042a4b-6b14-4c97-ae95-ac683956c297, target=unix:/run/openshell/ssh.sock)]
[1780727166.176] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727166.186] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727166.186] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727166.273] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=37042a4b-6b14-4c97-ae95-ac683956c297, target=unix:/run/openshell/ssh.sock)]
[1780727171.828] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED /usr/local/bin/node(484) -> api.telegram.org:443 [policy:telegram_bot engine:opa]
[1780727171.922] [sandbox] [OCSF ] [ocsf] HTTP:POST [INFO] ALLOWED POST http://api.telegram.org:443/bot<REDACTED>/getUpdates [policy:telegram_bot engine:l7]
[1780727173.392] [sandbox] [OCSF ] [ocsf] HTTP:GET [INFO] ALLOWED GET http://api.telegram.org:443/bot<REDACTED>/getMe [policy:telegram_bot engine:l7]
[1780727195.549] [sandbox] [OCSF ] [ocsf] HTTP:GET [INFO] ALLOWED GET http://api.telegram.org:443/bot<REDACTED>/getMe [policy:telegram_bot engine:l7]
[1780727202.544] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED /usr/local/bin/node(484) -> api.telegram.org:443 [policy:telegram_bot engine:opa]
[1780727202.636] [sandbox] [OCSF ] [ocsf] HTTP:POST [INFO] ALLOWED POST http://api.telegram.org:443/bot<REDACTED>/getUpdates [policy:telegram_bot engine:l7]
[1780727226.571] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED /usr/local/bin/node(484) -> api.telegram.org:443 [policy:telegram_bot engine:opa]
[1780727226.667] [sandbox] [OCSF ] [ocsf] HTTP:GET [INFO] ALLOWED GET http://api.telegram.org:443/bot<REDACTED>/getMe [policy:telegram_bot engine:l7]
[1780727228.649] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727228.813] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727228.648] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=d9af327b-e6ac-4fc1-9ffe-dada8ffdef99, target=unix:/run/openshell/ssh.sock)]
[1780727228.649] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727228.701] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727228.702] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727228.750] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=d9af327b-e6ac-4fc1-9ffe-dada8ffdef99, target=unix:/run/openshell/ssh.sock)]
[1780727228.813] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=fc64656f-2f7c-4d0d-89f6-70829247e1a6, target=unix:/run/openshell/ssh.sock)]
[1780727228.813] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727228.861] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727228.861] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727228.949] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=fc64656f-2f7c-4d0d-89f6-70829247e1a6, target=unix:/run/openshell/ssh.sock)]
[1780727230.087] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727230.087] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=dd07a55e-9f35-4ae3-93b2-26dc5a292221, target=unix:/run/openshell/ssh.sock)]
[1780727230.087] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727230.093] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727230.094] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727230.142] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=dd07a55e-9f35-4ae3-93b2-26dc5a292221, target=unix:/run/openshell/ssh.sock)]
[1780727230.202] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727230.202] [gateway] [INFO ] [openshell_server::grpc::sandbox] ExecSandbox (relay): command started
[1780727230.201] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=abdb25cd-4e59-47ea-b20d-2bc96ddfa8eb, target=unix:/run/openshell/ssh.sock)]
[1780727230.202] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727230.246] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727230.246] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727230.266] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780727230.266] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=GET path=/v1/models protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780727230.353] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=abdb25cd-4e59-47ea-b20d-2bc96ddfa8eb, target=unix:/run/openshell/ssh.sock)]
[1780727232.009] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727232.133] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727232.008] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=afdb5bde-ac05-40a3-93c9-20ef59ca6ece, target=unix:/run/openshell/ssh.sock)]
[1780727232.008] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727232.015] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727232.015] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727232.062] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=afdb5bde-ac05-40a3-93c9-20ef59ca6ece, target=unix:/run/openshell/ssh.sock)]
[1780727232.132] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=4838dd69-a5d4-4619-86bd-ec8047b18f41, target=unix:/run/openshell/ssh.sock)]
[1780727232.133] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727232.306] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727232.183] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727232.183] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727232.232] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=4838dd69-a5d4-4619-86bd-ec8047b18f41, target=unix:/run/openshell/ssh.sock)]
[1780727232.305] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=c68f56a8-8ebb-4bba-a139-149c874ad542, target=unix:/run/openshell/ssh.sock)]
[1780727232.305] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727232.356] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727232.357] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727232.405] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=c68f56a8-8ebb-4bba-a139-149c874ad542, target=unix:/run/openshell/ssh.sock)]
[1780727232.961] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED /usr/local/bin/node(484) -> api.telegram.org:443 [policy:telegram_bot engine:opa]
[1780727233.057] [sandbox] [OCSF ] [ocsf] HTTP:POST [INFO] ALLOWED POST http://api.telegram.org:443/bot<REDACTED>/getUpdates [policy:telegram_bot engine:l7]
[1780727233.365] [sandbox] [OCSF ] [ocsf] HTTP:GET [INFO] ALLOWED GET http://api.telegram.org:443/bot<REDACTED>/getMe [policy:telegram_bot engine:l7]
[1780727257.406] [sandbox] [OCSF ] [ocsf] HTTP:GET [INFO] ALLOWED GET http://api.telegram.org:443/bot<REDACTED>/getMe [policy:telegram_bot engine:l7]
[1780727263.377] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED /usr/local/bin/node(484) -> api.telegram.org:443 [policy:telegram_bot engine:opa]
[1780727263.470] [sandbox] [OCSF ] [ocsf] HTTP:POST [INFO] ALLOWED POST http://api.telegram.org:443/bot<REDACTED>/getUpdates [policy:telegram_bot engine:l7]
[1780727283.616] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727283.615] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=0990e1d5-6647-4e56-9931-cecd30290289, target=unix:/run/openshell/ssh.sock)]
[1780727283.615] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727283.800] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727283.662] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727283.663] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727283.750] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=0990e1d5-6647-4e56-9931-cecd30290289, target=unix:/run/openshell/ssh.sock)]
[1780727283.800] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=3fe71e19-41d1-445c-abdf-29d88f9289ad, target=unix:/run/openshell/ssh.sock)]
[1780727283.800] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727283.892] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727283.892] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727283.940] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=3fe71e19-41d1-445c-abdf-29d88f9289ad, target=unix:/run/openshell/ssh.sock)]
[1780727285.120] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727285.119] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=2b698d34-8122-451c-8e18-f5bae23e3344, target=unix:/run/openshell/ssh.sock)]
[1780727285.120] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727285.128] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727285.128] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727285.232] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727285.232] [gateway] [INFO ] [openshell_server::grpc::sandbox] ExecSandbox (relay): command started
[1780727285.213] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=2b698d34-8122-451c-8e18-f5bae23e3344, target=unix:/run/openshell/ssh.sock)]
[1780727285.232] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=9cf6fa3f-69ed-4733-a4d8-4fb795a97665, target=unix:/run/openshell/ssh.sock)]
[1780727285.232] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727285.276] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727285.276] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727285.293] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED inference.local:443
[1780727285.293] [sandbox] [INFO ] [openshell_router] routing proxy inference request (streaming) endpoint=http://host.openshell.internal:8000/v1 method=GET path=/v1/models protocols=openai_chat_completions,openai_completions,openai_responses,model_discovery
[1780727285.378] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=9cf6fa3f-69ed-4733-a4d8-4fb795a97665, target=unix:/run/openshell/ssh.sock)]
[1780727287.083] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727287.083] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=d21b1c20-4e18-480d-a639-6b42b9c742fc, target=unix:/run/openshell/ssh.sock)]
[1780727287.083] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727287.092] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727287.092] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727287.209] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727287.355] [gateway] [INFO ] [openshell_server::supervisor_session] supervisor session: relay opened successfully
[1780727287.178] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=d21b1c20-4e18-480d-a639-6b42b9c742fc, target=unix:/run/openshell/ssh.sock)]
[1780727287.209] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=bce65032-5b07-4bfc-bdd6-7ef6fa350ad5, target=unix:/run/openshell/ssh.sock)]
[1780727287.209] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727287.217] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727287.217] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727287.263] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=bce65032-5b07-4bfc-bdd6-7ef6fa350ad5, target=unix:/run/openshell/ssh.sock)]
[1780727287.355] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] [msg:ssh relay open (channel_id=55a571d5-5c65-4cef-89db-1139dba0e7f0, target=unix:/run/openshell/ssh.sock)]
[1780727287.355] [sandbox] [OCSF ] [ocsf] SSH:OPEN [INFO] ALLOWED
[1780727287.363] [sandbox] [OCSF ] [ocsf] CONFIG:APPLYING [INFO] Applying Landlock filesystem sandbox [abi:V2 compat:BestEffort ro:7 rw:12]
[1780727287.363] [sandbox] [OCSF ] [ocsf] CONFIG:BUILT [INFO] Landlock ruleset built [rules_applied:18 skipped:1]
[1780727287.409] [sandbox] [OCSF ] [ocsf] NET:CLOSE [INFO] [msg:ssh relay closed (channel_id=55a571d5-5c65-4cef-89db-1139dba0e7f0, target=unix:/run/openshell/ssh.sock)]
[1780727288.409] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED /usr/local/bin/node(484) -> api.telegram.org:443 [policy:telegram_bot engine:opa]
[1780727288.504] [sandbox] [OCSF ] [ocsf] HTTP:GET [INFO] ALLOWED GET http://api.telegram.org:443/bot<REDACTED>/getMe [policy:telegram_bot engine:l7]
[1780727293.366] [sandbox] [OCSF ] [ocsf] HTTP:GET [INFO] ALLOWED GET http://api.telegram.org:443/bot<REDACTED>/getMe [policy:telegram_bot engine:l7]
[1780727293.784] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED /usr/local/bin/node(484) -> api.telegram.org:443 [policy:telegram_bot engine:opa]
[1780727293.876] [sandbox] [OCSF ] [ocsf] HTTP:POST [INFO] ALLOWED POST http://api.telegram.org:443/bot<REDACTED>/getUpdates [policy:telegram_bot engine:l7]
[1780727319.250] [sandbox] [OCSF ] [ocsf] HTTP:GET [INFO] ALLOWED GET http://api.telegram.org:443/bot<REDACTED>/getMe [policy:telegram_bot engine:l7]
[1780727324.202] [sandbox] [OCSF ] [ocsf] NET:OPEN [INFO] ALLOWED /usr/local/bin/node(484) -> api.telegram.org:443 [policy:telegram_bot engine:opa]
[1780727324.295] [sandbox] [OCSF ] [ocsf] HTTP:POST [INFO] ALLOWED POST http://api.telegram.org:443/bot<REDACTED>/getUpdates [policy:telegram_bot engine:l7]

═══ Onboard Session ═══

{
  "version": 1,
  "sessionId": "1780723522687-9a72ae4b-d0bf-4779-9ce8-68c6b3fea47e",
  "status": "complete",
  "resumable": false,
  "mode": "interactive",
  "startedAt": "2026-06-06T05:25:22.687Z",
  "updatedAt": "2026-06-06T05:27:24.801Z",
  "sandboxName": "spark-nemo",
  "provider": "vllm-local",
  "model": "nemotron-3-super",
  "endpointUrl": "http://host.openshell.internal:8000/v1",
  "credentialEnv": null,
  "hermesAuthMethod": null,
  "preferredInferenceApi": "openai-completions",
  "nimContainer": null,
  "hermesToolGateways": [],
  "policyPresets": [
    "npm",
    "pypi",
    "huggingface",
    "brew",
    "brave",
    "github",
    "local-inference",
    "telegram",
    "gmail-api"
  ],
  "gpuPassthrough": true,
  "lastStepStarted": "policies",
  "lastCompletedStep": "policies",
  "failure": null,
  "machine": {
    "version": 1,
    "state": "complete",
    "stateEnteredAt": "2026-06-06T05:27:22.577Z",
    "revision": 10
  },
  "steps": {
    "preflight": {
      "status": "complete",
      "startedAt": "2026-06-06T05:25:22.698Z",
      "completedAt": "2026-06-06T05:25:23.816Z",
      "error": null
    },
    "gateway": {
      "status": "complete",
      "startedAt": null,
      "completedAt": "2026-06-06T05:25:23.921Z",
      "error": null
    },
    "sandbox": {
      "status": "complete",
      "startedAt": "2026-06-06T05:25:54.841Z",
      "completedAt": "2026-06-06T05:27:15.023Z",
      "error": null
    },
    "provider_selection": {
      "status": "complete",
      "startedAt": "2026-06-06T05:25:23.922Z",
      "completedAt": "2026-06-06T05:25:29.052Z",
      "error": null
    },
    "inference": {
      "status": "complete",
      "startedAt": "2026-06-06T05:25:36.433Z",
      "completedAt": "2026-06-06T05:25:36.839Z",
      "error": null
    },
    "openclaw": {
      "status": "complete",
      "startedAt": "2026-06-06T05:27:15.023Z",
      "completedAt": "2026-06-06T05:27:17.752Z",
      "error": null
    },
    "agent_setup": {
      "status": "skipped",
      "startedAt": null,
      "completedAt": null,
      "error": null
    },
    "policies": {
      "status": "complete",
      "startedAt": "2026-06-06T05:27:17.754Z",
      "completedAt": "2026-06-06T05:27:21.136Z",
      "error": null
    }
  }
}

═══ Sandbox Internals ═══

UID          PID    PPID  C STIME TTY          TIME CMD
root           1       0  0 05:27 ?        00:00:12 /opt/openshell/bin/openshell-sandbox env CHAT_UI_URL=http://127.0.0.1:18789 NEMOCLAW_DASHBOARD_PORT=18789 nemoclaw-start
sandbox       84       1  0 05:27 ?        00:00:00 bash /usr/local/bin/nemoclaw-start
sandbox       90      84  0 05:27 ?        00:00:00 tee -a /tmp/nemoclaw-start.log
sandbox       91      84  0 05:27 ?        00:00:00 tee -a /tmp/nemoclaw-start.log
sandbox      484      84  1 05:27 ?        00:01:00 openclaw
sandbox      485      84  0 05:27 ?        00:00:00 bash /usr/local/bin/nemoclaw-start
sandbox      486     485  0 05:27 ?        00:00:00 tail -n +1 -F /tmp/gateway.log
sandbox      488     485  0 05:27 ?        00:00:00 sed -u s/^/[gateway-log:] /
sandbox      499      84  0 05:27 ?        00:00:00 bash /usr/local/bin/nemoclaw-start
sandbox      500     499  0 05:27 ?        00:00:00 tail -n +1 -F /tmp/gateway.log
sandbox      502      84  0 05:27 ?        00:00:00 python3 -
sandbox     4925       1  0 05:57 ?        00:00:00 tail -n 200 -f /tmp/gateway.log
sandbox     4944       1  0 05:57 ?        00:00:00 tail -n 200 -f /tmp/gateway.log
sandbox     5059       1  0 05:58 ?        00:00:00 tail -n 200 -f /tmp/gateway.log
sandbox     8921       1  0 06:28 ?        00:00:00 ps -ef
               total        used        free      shared  buff/cache   available
Mem:          124610      118703        3573         105        3559        5906
Swap:          16383        4530       11853



### Logs

```shell

```

### Checklist

- [x] I confirmed this bug is reproducible
- [x] I searched existing issues and this is not a duplicate

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[DGX Spark][Ubuntu 24.04] Sandbox deletion leaves stale providers causing onboard --resume to fail #4890

Description

Expected Behavior

Actual Behavior

Workaround

Impact

Reproduction Steps

Environment

Debug Output

Logs

Checklist

Metadata

Assignees

Labels

Type

Fields

Projects

Milestone

Relationships

Development

[DGX Spark][Ubuntu 24.04] Sandbox deletion leaves stale providers causing onboard --resume to fail #4890

Description

Description

Expected Behavior

Actual Behavior

Workaround

Impact

Reproduction Steps

Environment

Debug Output

Logs

Checklist

Metadata

Metadata

Assignees

Labels

Type

Fields

Projects

Milestone

Relationships

Development

Issue actions