NVIDIA AI Open-Sources ‘OpenShell’: A Secure Runtime Environment for Autonomous AI Agents

OpenShell was open-sourced, nVIDIA released OpenShell under the Apache 2.0 license.

Provides a runtime layer between agents and the operating system, openShell places a protective layer between agents and the OS to restrict tool use.

Sandboxing uses kernel-level isolation, openShell uses kernel-level isolation called Landlock LSM.

Policy engine supports granular policy enforcement, openShell enforces per-binary, per-endpoint, and per-method controls with audit logging.

Private inference routing routes inference traffic through a private layer, openShell intercepts model traffic to enforce privacy and cost constraints.