OpenShell puts enforceable runtime limits around autonomous agents
NVIDIA’s OpenShell lets teams run autonomous agents with access to files, APIs, and credentials without handing them unrestricted access to the host, data, or network. Each agent runs in an isolated sandbox, while kernel controls check file access, system calls, and network connections; credentials are added only to approved requests. Policy changes also get formal verification before approval, flagging new access for human review.