What problem does it solve? Upgrading the pinned Hermes Agent dependency in NVIDIA/NemoClaw is risky: CalVer release tags, annotated tag identity, downstream compatibility patches, durable SQLite state, and base-image publication all must be audited and kept consistent, and a naive version bump can silently change security defaults or break runtime contracts. ## Core Features & Use Cases - Release identity resolution: Reconciles authoritative NousResearch/hermes-agent GitHub releases with a local clone, validating annotated tag objects, peeled commits, and adjacent CalVer ranges via the collect-hermes-release-supplement.py script. - Contract auditing: Maps every upstream change through NemoClaw surfaces including generated config, wrapper flags, compatibility patches, durable state, packaging, and runtime behavior using the Hermes contract map reference. - Image build and publication workflow: Guides exact-tag source pinning, BuildKit base and final image builds, base-image workflow dispatch, and immutable multi-platform digest pinning. - Use Case: A maintainer upgrading Hermes from v2026.7.7 to v2026.7.7.2 uses this Skill to audit the release range, retarget patches, rebuild the base image, and produce an approval-ready PR. ## Quick Start Use the nemoclaw-contributor-update-hermes skill to audit and deliver the Hermes upgrade to the target tag end to end.