Nvidia OpenShell
Nvidia has released OpenShell 0.1.0, a runtime environment designed to safely manage autonomous AI agents by enforcing strict policies on file access and network connections. The tool uses kernel instrumentation and formal verification to ensure agents operate within defined security boundaries.
Why it matters
As autonomous agents become more capable, secure runtime environments are critical to preventing unauthorized data access and system exploitation.
New in OpenShell 0.1.x: a stable release cadence, new isolation primitives, an expanded extension surface, and new APIs. Read the 0.1.0 upgrade guide .
OpenShell is the safe, private runtime for fleets of autonomous AI agents. Agents are most useful when they can read files, install packages, call APIs, and use credentials. OpenShell gives them that capability without giving them unrestricted access to your data, secrets, or network. You declare what each agent can touch in a policy, and OpenShell enforces it.
OpenShell governs what agents can do in two ways: it instruments the kernel to enforce policy on every file access, system call, and network connection at runtime, and it uses formal verification to check what a policy change would allow before it is applied.
See Architecture for how the gateway, supervisor, and sandbox fit together.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in