NVIDIA OpenShell
ActivoNVIDIA's open-source runtime that sandboxes autonomous AI agents under enforced policy
OpenShell is NVIDIA's free, Apache-2.0 runtime that sandboxes autonomous agents with kernel-level file, syscall and network policy, injects credentials only for approved endpoints, and checks policy changes before you approve them. Conditional because it is at 0.1.x, Windows runs through WSL 2 and is marked experimental, and anonymous telemetry is on by default. Right for teams that want to trial policy-enforced agent isolation on Linux or Apple Silicon; we have not tested it.
Isolation runtime that hosts third-party agents under enforced policy; the pages read describe no model loop of its own.
¿Es adecuada para ti?
Bueno para
- Bounding what an agent can touch: kernel-level controls restrict file access, system calls and network connections per declared policy
- Keeping real credentials away from the agent: they are added only to requests bound for approved endpoints
- Reviewing permission changes: policy changes are verified to flag risky new access before approval, with human review for sensitive ones
- Running many sandboxes under one control plane: gateways manage sandboxes and policies, with Helm deployment on Kubernetes and SDKs for Python, TypeScript, Go and Rust
No recomendado para
- A production dependency today: the project is at 0.1.x, with v0.1.0 published on GitHub on September 25, 2026
- Windows-first teams: Windows is supported through WSL 2 and marked experimental
- Environments that cannot allow telemetry: anonymous operational telemetry is on by default and must be turned off with an environment variable
- A ready-to-run agent: the default sandbox image is a minimal Ubuntu with no agent in it
Nuestra experiencia
Precios
Código abierto- Apache License 2.0
- Self-hosted via install script or Helm on Kubernetes
- No paid tier on the pages we read
Aún no hay cambios de veredicto
El reloj corre desde el primer día: los cambios aparecerán aquí a medida que evolucione nuestro veredicto.
Fuentes
Registro de verificación
- Perfil· Sin cambios
Agente automatizado
¿La quieres funcionando en tu empresa?
Hemos probado esta herramienta y construimos con herramientas así cada día. Cuéntanos el flujo de trabajo y la instalamos, la integramos y te la entregamos funcionando.
La conversación funciona con Gnosari, una de las herramientas de este directorio. Una conversación real, no un guion de ventas.