NVIDIA OpenShell
OpenShell is NVIDIA's open-source runtime for running AI agents inside a sandbox. It sits beneath the agent harness, runs the agent without privileges, limits which files it can reach, filters system calls at the kernel level, and checks every network request against policy by binary, destination, method and path. Nothing is allowed by default, credentials are only supplied where policy permits, a policy-aware router controls which model endpoints the agent can call, and every decision is logged. It supports Claude Code, Codex, GitHub Copilot CLI, Hermes, LangChain Deep Agents, OpenClaw and OpenCode, and runs on Docker, Podman, Kubernetes via Helm, and NVIDIA DGX Spark and DGX Station. First announced in March 2026, it became the software half of NVIDIA's Open Agent Safety Platform on September 28, 2026, alongside Sentry, a monitor that runs on BlueField-4 hardware.
