SettledAgents
Nvidia's OpenShell sandboxes AI agents so they never see real credentials
Nvidia's OpenShell, an Apache-2.0 runtime on GitHub, runs each agent in its own sandbox with kernel-level file and system-call limits. Every outbound connection is checked against policy, and credentials are added only to requests bound for approved endpoints. SDKs cover Python, TypeScript, Go and Rust. The repo points to 0.1.x releases.
- HEAT
- OUTLETS
- 0
- HACKER NEWS
- 481 pts
- FIRST SEEN
- LAST SIGNAL
Primary source
GitHubgithub.com/NVIDIA/OpenShellCoverage · 1 article, oldest first
Thursday, October 22, 2026
GitHubPrimary481 pts on HN
OpenShell – A safe, private runtime for fleets of autonomous AI agents