NVIDIA Open-Sources OpenShell: Apache 2.0 Agent Sandbox with Kernel-Level Isolation.

NVIDIA's OpenShell enforces security policy at the execution layer without modifying agent code. Each agent runs in its own container with policy-enforced egress routing. Policies are declarative YAML controlling filesystem access, network, process execution, and inference calls. ServiceNow adopted it immediately. This pairs with NVIDIA's Red Team guidance declaring that LLM-generated code must be treated as untrusted output and all config file writes must be blocked.