Nvidia OpenShell

NVIDIA released OpenShell 0.1.x, an open-source runtime for executing fleets of autonomous AI agents in sandboxed environments with kernel-level isolation. The release adds a stable release cadence, new isolation primitives, and an expanded extension surface, and pairs sandbox runtime controls with a declarative YAML policy so teams can run agents without granting unrestricted access to local files, credentials, and external networks. An upgrade guide documents everything that changed in the 0.1.0 release.

Overview of NVIDIA OpenShell NVIDIA OpenShell is an open-source runtime for executing fleets of autonomous AI agents in sandboxed environments with kernel-level isolation. It combines sandbox runtime controls and a declarative YAML policy so teams can run agents without giving them unrestricted access to local files, credentials, and external networks. New in OpenShell 0.1.x: a stable release cadence https://docs.nvidia.com/openshell/about/support-matrix releases , new isolation primitives https://docs.nvidia.com/openshell/about/architecture , and an expanded extension surface https://docs.nvidia.com/openshell/extensibility/overview , along with much more. See our upgrade guide https://docs.nvidia.com/openshell/upgrade/0-1-0 for everything that’s changed. Why OpenShell Exists AI agents are most useful when they can read files, install packages, call APIs, and use credentials. That same access can create material risk. OpenShell is designed for this tradeoff: preserve agent capability while enforcing explicit controls over what the agent can access. Common Risks and Controls The table below summarizes common failure modes and how OpenShell mitigates them. Protection Layers at a Glance OpenShell applies defense in depth across the following policy domains. For details, refer to Sandbox Policies https://docs.nvidia.com/openshell/how-it-works/policies/overview and Default Policy https://docs.nvidia.com/openshell/how-it-works/policies/default-policy . Common Use Cases OpenShell supports a range of agent deployment patterns. Next Steps Explore these topics to go deeper: - To understand the runtime architecture, refer to Architecture https://docs.nvidia.com/openshell/about/architecture . - To prepare an image and launch an agent, refer to Run Your First Agent https://docs.nvidia.com/openshell/about/run-your-first-agent . - To learn how OpenShell enforces policy controls across protection layers, refer to Sandbox Policies https://docs.nvidia.com/openshell/how-it-works/policies/overview .