NVIDIA's OpenShell sandboxes AI agents and keeps real credentials from them

OpenShell is an open-source tool from NVIDIA (Apache 2.0) that runs each AI agent in its own sandbox. You write a policy saying which files, system calls and network destinations each agent may use, and OpenShell enforces it at the kernel level. Agents never see your real credentials: OpenShell adds them only to requests going to approved endpoints. Before a policy change is applied, it uses formal verification to flag risky new access, such as reaching a new host with credentials, so a person can review it. It runs on Linux, Apple Silicon Macs, or Windows with WSL 2 (experimental), using Docker, Podman or host virtualisation. It sends anonymous telemetry by default, and the README explains how to turn that off. On Hacker News (284 points, 142 comments from 29 top-level commenters when we read it), one camp liked it: one person said a large share of the demos at GTC Europe used it, and one said their team has been using it for a while. A second camp objected to telemetry being on by default. A third asked why not just use containers or plain Docker, and some doubted any tool can give agents wide access and still keep them safe. No consensus. Sorted take: the useful idea here is credentials the agent never sees. Whatever sandbox you choose, look for that.