NVIDIA OpenShell
A low-level runtime or shell execution environment technology from NVIDIA targeting the Windows platform, designed to extend GPU-accelerated containerization capabilities from Linux to the Windows ecosystem, providing hardware acceleration support for local AI inference and code execution.
Core Facts
OpenShell assigns an isolated execution sandbox to each agent session or task, restricting the scope of the file system, network egress and local processes it can access.
NVIDIA has released an open agentic safety platform comprising open-source software OpenShell and hardware Sentry that runs on data processing chips.
OpenShell's credential handling mechanism ensures the agent never sees the real keys; only when a request is sent to a user-approved endpoint does OpenShell inject the key.
Timeline (last 90 days)
The default sandbox created by OpenShell is an empty minimal Ubuntu image with no agents installed, so users need to build images containing agents themselves.
OpenShell policy rules can be reloaded and take effect in real time without a restart.
OpenShell's policy advisor feature drafts a fine-grained rule for the agent when a request is blocked, which takes effect after human approval.
OpenShell's Linux static command-line tool is about 10 MB, and the full Debian package is about 74 MB.
The OpenShell gateway sends anonymous usage statistics by default, which can be disabled via an environment variable.
OpenShell gained nearly a thousand stars on GitHub on its release day, and the project has accumulated over 10,000 stars.
OpenShell's current version is 1.2, which is a "patched-up 2.0 version," with three versions released in four days.
OpenShell requires an operating system of Linux, an Apple Silicon Mac, or Windows running via WSL2 (Windows support is experimental), Docker 28 or later, and Linux kernel 6.2 or later.
When OpenShell detects that the kernel does not support Landlock, it directly refuses to start the sandbox rather than silently degrading.
The OpenShell supervisor checks HTTP methods rather than just hostnames; for example, when curl is allowed read-only access to the GitHub API, POST requests are still blocked.
4 more timeline events
All Facts (14)
OpenShell assigns an isolated execution sandbox to each agent session or task, restricting the scope of the file system, network egress and local processes it can access.
80%VerifiedNVIDIA has released an open agentic safety platform comprising open-source software OpenShell and hardware Sentry that runs on data processing chips.
75%Partially VerifiedOpenShell's credential handling mechanism ensures the agent never sees the real keys; only when a request is sent to a user-approved endpoint does OpenShell inject the key.
65%UnverifiedNVIDIA open-sourced OpenShell on GitHub, a runtime security sandbox designed specifically for autonomous AI agents.
60%UnverifiedWhen OpenShell detects that the kernel does not support Landlock, it directly refuses to start the sandbox rather than silently degrading.
50%UnverifiedThe OpenShell supervisor checks HTTP methods rather than just hostnames; for example, when curl is allowed read-only access to the GitHub API, POST requests are still blocked.
50%UnverifiedOpenShell policy rules can be reloaded and take effect in real time without a restart.
50%UnverifiedOpenShell's policy advisor feature drafts a fine-grained rule for the agent when a request is blocked, which takes effect after human approval.
50%UnverifiedOpenShell's Linux static command-line tool is about 10 MB, and the full Debian package is about 74 MB.
50%UnverifiedThe OpenShell gateway sends anonymous usage statistics by default, which can be disabled via an environment variable.
50%UnverifiedThe default sandbox created by OpenShell is an empty minimal Ubuntu image with no agents installed, so users need to build images containing agents themselves.
50%UnverifiedOpenShell gained nearly a thousand stars on GitHub on its release day, and the project has accumulated over 10,000 stars.
50%UnverifiedOpenShell's current version is 1.2, which is a "patched-up 2.0 version," with three versions released in four days.
50%UnverifiedOpenShell requires an operating system of Linux, an Apple Silicon Mac, or Windows running via WSL2 (Windows support is experimental), Docker 28 or later, and Linux kernel 6.2 or later.
50%