diff --git a/docs/changelog/2026-07-24.mdx b/docs/changelog/2026-07-24.mdx
index 5d2322ac04..097eb58916 100644
--- a/docs/changelog/2026-07-24.mdx
+++ b/docs/changelog/2026-07-24.mdx
@@ -3,6 +3,33 @@
  * SPDX-License-Identifier: Apache-2.0
  */}
 
+## v0.0.95
+
+NemoClaw v0.0.95 adds explicit ownership for externally supervised OpenShell gateways, strengthens recovery and state-transfer paths, expands inference compatibility, refreshes sandbox security packages, and requires E2E evidence from executed runs while separating runner wait time from test execution.
+
+- Platforms can now declare whether NemoClaw or an external systemd service owns the OpenShell gateway lifecycle.
+  NemoClaw validates the declared listener and keeps stop, recovery, and uninstall operations from changing an externally supervised gateway.
+  Stopping a sandbox now removes its dashboard forward, forward startup retries terminated listener attempts, and managed recovery retries dropped OpenShell relay connections.
+  Hermes preserves managed gateway restart recovery.
+  Uninstall keeps OpenShell-orphaned sibling sandboxes outside the selected cleanup scope.
+  For more information, refer to [Declare the OpenShell Gateway Lifecycle Authority](/user-guide/openclaw/deployment/gateway-lifecycle-authority), [Run Sandboxes](/user-guide/openclaw/manage-sandboxes/operate-sandboxes/run-sandboxes), [Recover and Rebuild Sandboxes](/user-guide/openclaw/manage-sandboxes/operate-sandboxes/recover-and-rebuild-sandboxes), and [Uninstall NemoClaw](/user-guide/openclaw/manage-sandboxes/operate-sandboxes/uninstall-nemoclaw).
+- Snapshot restore now replaces SQLite state files through staged atomic operations.
+  Strict `backup-all` skips stranded orphan sandboxes, and `nemoclaw <name> download` verifies that each requested host artifact exists before reporting success.
+  For more information, refer to [Create and Restore Snapshots](/user-guide/openclaw/manage-sandboxes/state-and-backups/create-and-restore-snapshots) and the [NemoClaw CLI Commands Reference](/user-guide/openclaw/reference/commands).
+- Onboarding now reuses a reachable Ollama service on Windows hosts and falls back to the standard CDI directories when Docker reports no CDI specification directories.
+  OpenRouter forwarding applies a connection-establishment deadline, and managed NVIDIA Build Nemotron-3 requests omit the unsupported top-level `thinking` field.
+  Managed Deep Agents Code preserves configured headless retry limits while classifying provider failures.
+  For more information, refer to [Set Up Ollama](/user-guide/openclaw/inference/local-inference/set-up-ollama), [Configure Inference Timeouts](/user-guide/openclaw/inference/manage-inference/configure-inference-timeouts), and [NemoClaw Quickstart with Deep Agents](/user-guide/deepagents/get-started/quickstart).
+- When a base-image override is supplied, NemoClaw accepts only an official immutable remote digest or a local image built and pinned during the current operation.
+  Rebuilds can reuse those local images, OpenClaw runtime checks validate version output, and shields preserve `openclaw.json` when a legacy lock has no config hash.
+  The base images also update bundled npm packages, Perl, libexpat, and jq to address reviewed security findings, while the final OpenClaw image uses fewer payload layers.
+  For more information, refer to [Recover and Rebuild Sandboxes](/user-guide/openclaw/manage-sandboxes/operate-sandboxes/recover-and-rebuild-sandboxes), [Architecture Details](/user-guide/openclaw/reference/architecture), and the [NemoClaw CLI Commands Reference](/user-guide/openclaw/reference/commands).
+- The default OpenClaw Discord policy now allows the bot to manage its own application commands without granting unrelated Discord API access.
+  For more information, refer to [Choose Messaging Channels](/user-guide/openclaw/manage-sandboxes/messaging-channels/choose-messaging-channels) and [Network Policies](/user-guide/openclaw/reference/network-policies).
+- Release E2E automation no longer accepts a skipped PR gate as passing evidence.
+  Root image changes select the full suite, direct `main` runs provision Hermes swap, retry reservations clean up after terminal outcomes, and runtime reports separate runner wait time from execution time.
+  Nightly history and selected-test risk signals make infrastructure delays and product failures easier to distinguish.
+
 ## v0.0.94
 
 NemoClaw v0.0.94 strengthens sandbox restore and update behavior, adds machine-readable onboarding progress, improves policy and security evidence, reduces Hermes image build time, and makes live E2E failures easier to classify.