Nvidia OpenShell (docs.nvidia.com)

NVIDIA has introduced OpenShell, an open-source runtime designed to enable fleets of autonomous AI agents to operate in secure, sandboxed environments with kernel-level isolation. This innovative tool allows teams to manage the capabilities of AI agents while enforcing strict access controls through a declarative YAML policy. OpenShell addresses a critical challenge in AI deployment: balancing the operational needs of agents—such as reading files, installing packages, and accessing external APIs—with the inherent risks of granting unrestricted access to sensitive local files and credentials. Significantly, OpenShell enhances security for AI applications by implementing defense-in-depth strategies across multiple policy domains, effectively mitigating common failure modes. This provides organizations with a robust framework to harness the power of AI agents without compromising their security posture. Common use cases for OpenShell include various agent deployment patterns that require controlled interactions with systems and data, making it a vital tool in the ongoing development of safe and responsible AI practices.