NVIDIA OpenShell
AktivNVIDIA's open-source runtime that sandboxes autonomous AI agents under enforced policy
OpenShell is NVIDIA's free, Apache-2.0 runtime that sandboxes autonomous agents with kernel-level file, syscall and network policy, injects credentials only for approved endpoints, and checks policy changes before you approve them. Conditional because it is at 0.1.x, Windows runs through WSL 2 and is marked experimental, and anonymous telemetry is on by default. Right for teams that want to trial policy-enforced agent isolation on Linux or Apple Silicon; we have not tested it.
Isolation runtime that hosts third-party agents under enforced policy; the pages read describe no model loop of its own.
Ist es das Richtige für dich?
Gut für
- Bounding what an agent can touch: kernel-level controls restrict file access, system calls and network connections per declared policy
- Keeping real credentials away from the agent: they are added only to requests bound for approved endpoints
- Reviewing permission changes: policy changes are verified to flag risky new access before approval, with human review for sensitive ones
- Running many sandboxes under one control plane: gateways manage sandboxes and policies, with Helm deployment on Kubernetes and SDKs for Python, TypeScript, Go and Rust
Nicht geeignet für
- A production dependency today: the project is at 0.1.x, with v0.1.0 published on GitHub on September 25, 2026
- Windows-first teams: Windows is supported through WSL 2 and marked experimental
- Environments that cannot allow telemetry: anonymous operational telemetry is on by default and must be turned off with an environment variable
- A ready-to-run agent: the default sandbox image is a minimal Ubuntu with no agent in it
Unsere Erfahrung
Preise
Open Source- Apache License 2.0
- Self-hosted via install script or Helm on Kubernetes
- No paid tier on the pages we read
Noch keine Urteilsänderungen
Die Uhr läuft ab dem ersten Tag. Änderungen erscheinen hier, sobald sich unser Urteil weiterentwickelt.
Quellen
Prüfprotokoll
- Profil· Keine Änderungen
Automatisierter Agent
Wollen Sie das in Ihrem Unternehmen laufen haben?
Wir haben dieses Tool getestet und bauen täglich mit Tools wie diesem. Sagen Sie uns den Ablauf, wir richten es ein, integrieren es und übergeben es funktionsfähig.
Das Gespräch läuft auf Gnosari, einem der Tools in diesem Verzeichnis. Ein echtes Gespräch, kein Verkaufsskript.