NVIDIA open-sources OpenShell 0.1.0 to add runtime permissions and sandboxing for AI agents

NVIDIA released OpenShell 0.1.0, an open-source runtime that enforces which systems and data an AI agent can access without rewriting the agent. It bundles sandboxed execution, controlled service access, credential management, and formal policy analysis so teams can restrict API operations and protect credentials outside the agent workload. Cadence, Slack, and Gecko Robotics are already adopting it for chip design, enterprise automation, and physical robot governance. Three components—Gateway, Supervisor, and Sandbox—manage agent fleets, inspect outbound requests against policy, and apply kernel-level filesystem and process controls. A policy prover uses formal logic to verify that permissions stay within defined boundaries. It supports Codex, Claude Code, Pi, Hermes, and runs on Docker and Kubernetes.