Release2026-09-29

NVIDIA released OpenShell as a runtime for autonomous AI agents. It enforces policies at the kernel level for file, system call and network access. Agents run in isolated sandboxes and never see real credentials. OpenShell uses formal verification to flag risky policy changes before approval. It supports Linux, macOS on Apple Silicon and Windows with WSL 2. Docker, Podman or host virtualization are required. The default sandbox image is minimal Ubuntu. A CLI and local gateway are included in the installer.

What it unlocks

Running autonomous AI agents with kernel-level isolation and policy enforcement.

What you need to act on it

  • Linux, macOS on Apple Silicon, or Windows with WSL 2
  • Docker, Podman, or host virtualization

Sources

Send this to someone who needs it

Shares the story and its sources. Nothing about you.

What does this mean for your job?

This is the story as everyone gets it. Once a week we send you the version written for your role — what changed, why it matters for the work you actually do, and one thing to try. Free while we tune it.