OpenShell
Open-source safe, private runtime and sandbox for fleets of autonomous AI agents, enforcing access policies at the kernel level.
Description
OpenShell is an open-source (Apache 2.0) runtime built by NVIDIA for safely running fleets of autonomous AI agents in isolation. It lets agents read files, install packages, call APIs, and use credentials without granting them unrestricted access to data, secrets, or the network.
What each agent is allowed to do is declared in a policy that OpenShell enforces in two ways: it instruments the kernel to govern every file access, system call, and network connection at runtime, and it uses formal verification to flag risky new access before a policy change is approved, holding such changes for human review.
Each agent runs in an isolated sandbox and never sees real credentials — OpenShell adds them only to requests bound for approved endpoints. The architecture consists of a gateway (control plane), a supervisor, and the sandbox. The project is written in Rust and provides SDKs for Python, TypeScript, Go, and Rust, plus Kubernetes deployment via Helm.