NVIDIA OpenShell
AtivoNVIDIA's open-source runtime that sandboxes autonomous AI agents under enforced policy
OpenShell is NVIDIA's free, Apache-2.0 runtime that sandboxes autonomous agents with kernel-level file, syscall and network policy, injects credentials only for approved endpoints, and checks policy changes before you approve them. Conditional because it is at 0.1.x, Windows runs through WSL 2 and is marked experimental, and anonymous telemetry is on by default. Right for teams that want to trial policy-enforced agent isolation on Linux or Apple Silicon; we have not tested it.
Isolation runtime that hosts third-party agents under enforced policy; the pages read describe no model loop of its own.
É adequada para ti?
Bom para
- Bounding what an agent can touch: kernel-level controls restrict file access, system calls and network connections per declared policy
- Keeping real credentials away from the agent: they are added only to requests bound for approved endpoints
- Reviewing permission changes: policy changes are verified to flag risky new access before approval, with human review for sensitive ones
- Running many sandboxes under one control plane: gateways manage sandboxes and policies, with Helm deployment on Kubernetes and SDKs for Python, TypeScript, Go and Rust
Não recomendado para
- A production dependency today: the project is at 0.1.x, with v0.1.0 published on GitHub on September 25, 2026
- Windows-first teams: Windows is supported through WSL 2 and marked experimental
- Environments that cannot allow telemetry: anonymous operational telemetry is on by default and must be turned off with an environment variable
- A ready-to-run agent: the default sandbox image is a minimal Ubuntu with no agent in it
A nossa experiência
Preços
Código aberto- Apache License 2.0
- Self-hosted via install script or Helm on Kubernetes
- No paid tier on the pages we read
Ainda sem alterações de veredicto
O relógio começa a contar no primeiro dia: as alterações aparecem aqui à medida que o nosso veredicto evolui.
Fontes
Registo de verificação
- Perfil· Sem alterações
Agente automatizado
Quer isto a funcionar na sua empresa?
Testámos esta ferramenta e construímos com ferramentas assim todos os dias. Diga-nos o fluxo de trabalho e nós instalamos, integramos e entregamos a funcionar.
A conversa funciona com Gnosari, uma das ferramentas deste diretório. Uma conversa real, não um guião de vendas.