NVIDIA open-sources OpenShell, a kernel-level sandbox for AI agents

NVIDIA released OpenShell, an open-source runtime that isolates AI agents in sandboxes and enforces file, process and network permissions at the Linux kernel level. YAML policies define access, agents never see real credentials, and new rules pass formal verification before approval. The project is Apache 2.0 licensed, at v0.1.5 with about 20,000 GitHub stars.

• Isolation via Landlock and system-call checks at the Linux kernel level
• Network egress denied by default; credentials injected only for approved destinations
• New policies undergo formal verification and wait for human approval
• SDKs for Python, TypeScript, Go and Rust; requires Docker or Podman