01—NVIDIA is treating memory as part of the agent architecture
NVIDIA’s latest NemoClaw example starts from a simple idea: an agent becomes more useful when it can carry the right context from one workday into the next.
The company published a memory-driven “Chief of Staff” design on September 4. Instead of asking the model to reconstruct a person’s projects, priorities, collaborators, and obligations every time a new task arrives, the agent maintains a durable memory layer that can be inspected and updated over time.
That memory is not one giant conversation log. NVIDIA splits it into structures with different jobs.
The result is an agent that can remember who matters to a project, what the user has chosen to prioritize, which obligations are still active, and how previous corrections should shape later decisions. The model reasons over that context, while the surrounding runtime keeps execution inside the policies and permissions already defined for the system.
02—The self model lives in readable Markdown
The knowledge side of the design is intentionally easy to inspect.
NVIDIA stores the self model as human-readable Markdown pages. Those pages can represent people, projects, priorities, goals, and recurring working patterns, with indexes, cross-references, source information, and maintenance rules around the material.
That makes the memory layer look more like a small, structured knowledge base than a hidden store.
A collaborator page can record useful context about how that person works. A project page can preserve the current objective and relevant history. A priorities page can capture what the user has explicitly chosen to focus on.
Because the pages remain readable, the agent’s durable context is visible to the people operating the system. Developers can inspect what the agent believes it knows, trace where that information came from, and update the memory without having to infer everything from model behavior.
03—SQLite keeps the agent’s judgments separate
NVIDIA uses a different structure for information that behaves more like an evolving work queue.
A SQLite ledger stores obligations, rankings, corrections, and audit events. That separates durable knowledge from the agent’s current judgment about what deserves attention.
The distinction is practical. “Project Atlas is a current priority” is knowledge. “This message should rank third today” is a judgment. The two can influence each other, but they do not have to live in the same record.
NVIDIA’s public recipe also uses deterministic code around ranking behavior, including tier limits and ordering. The model can reason about the work, while ordinary code keeps the bookkeeping consistent.
That gives the agent a memory of its own operational decisions without rewriting source systems just to preserve those decisions.
04—User corrections become part of the memory loop
The design also gives user corrections a durable place to live.
If the user moves an obligation to another priority tier, ignores it, or changes how a recurring type of work should be handled, that decision can be recorded as an append-only audit event. Later runs can preserve the updated judgment instead of starting from the earlier one again.
Repeated correction patterns can also become a small, readable preference policy.
The loop is straightforward: the agent makes a judgment, the user adjusts it, the adjustment is recorded, and future runs can use that history when they face a similar situation.
That turns feedback into operating context rather than a one-time conversation. The memory becomes more useful as the user keeps working with the agent because the system can carry forward explicit decisions about priorities and working style.
05—Priority follows user intent, not just incoming urgency
One of the more interesting parts of the recipe is the intent gate.
Incoming messages often contain their own urgency signals, but NVIDIA’s design ranks work against the priorities the user has already expressed. A request tied directly to chosen work can move higher than a louder request that sits outside the current focus.
The public synthetic walkthrough demonstrates that behavior with email and Slack-style messages. Priority-linked items can enter the highest tier, while other items remain visible without displacing work the user has already chosen.
This is where long-term memory starts to affect agent behavior in a practical way. The agent is not only recalling facts about the user. It is using those facts to organize the next set of actions.
For a Chief of Staff-style agent, that is the difference between remembering context and actually operating with it.
06—The benchmark shows a clear lift on memory-heavy questions
NVIDIA also evaluated the design with an Agent Memory Benchmark built around synthetic knowledge-work corpora.
The benchmark contains 186 questions and compares the self-model approach with an agentic RAG baseline. Both configurations use NVIDIA Nemotron 3 Ultra.
NVIDIA reports 90.9% overall accuracy for the self model, compared with 82.8% for the agentic RAG baseline. On the 31 hard questions, the self model reached 87.1%, up from 67.7%.
The biggest gain came from facts that changed over time. On that slice, the self model tracked the current answer correctly on all five questions, compared with 60% for the baseline. Entity disambiguation reached 86.7%, and multisource synthesis reached 94.5%.
Those are exactly the kinds of tasks a persistent work agent needs to handle: changing project state, overlapping names, information spread across several sources, and questions that depend on what was true at a particular point in time.
07—NemoClaw keeps memory and execution as separate layers
The memory layer does not become the permission layer.
NVIDIA’s design uses OpenShell around the agent runtime, with sandboxing and controls over filesystem, process, and network access. Credentials for managed inference and MCP connections remain outside the agent sandbox.
That separation gives the architecture a clean shape.
Memory can say that a collaborator prefers Slack. The agent can use that information while planning a response. Actual execution still depends on the tools and permissions available to the runtime.
Persistent context helps the agent decide what makes sense to do, while the runtime still controls what the agent is allowed to do.
For developers building longer-running assistants, that separation makes memory easier to add without turning the memory store itself into an authority system.
08—The Upgrade Feeling
A lot of agent products talk about memory as if the goal were simply to remember more.
NVIDIA’s NemoClaw example points in a more useful direction: remember the right things in the right structure.
People, projects, priorities, and working patterns stay in readable Markdown. Obligations and corrections live in a SQLite ledger. User feedback becomes part of an audit trail. The agent can use that context across sessions, while OpenShell keeps execution governed separately.
The benchmark result is strong, but the architecture is the part worth watching.
As agents take on longer projects, memory stops being a convenience feature. It becomes part of how the agent decides what matters next.
