aiqbench analysis
NVIDIA's OpenShell 0.1.0 introduces a critical runtime layer for AI agents by enforcing granular sandboxing, credential management, and formal policy analysis without requiring code rewrites. This infrastructure enables secure long-running agent operations across diverse frameworks like Codex and Claude Code while preventing privilege escalation at the kernel level. The release marks a significant step in operationalizing safety controls for autonomous systems beyond traditional virtualization boundaries.
Run AI agents longer and safer with NVIDIA’s OpenShell runtime

NVIDIA OpenShell 0.1.0 is an open-source runtime for defining and enforcing which systems and data an agent can access, combining sandboxed execution, controlled service access, credential management, and formal policy analysis. Teams can grant agents capabilities while OpenShell enforces permissions outside the workload, supporting frameworks like Codex, Claude Code, and Pi across applications and research.
NVIDIA has released OpenShell 0.1.0, an open-source runtime designed to add enforceable controls to AI agents without requiring code rewrites. The system combines sandboxed execution, controlled service access and formal policy analysis, allowing teams to grant agents necessary capabilities while maintaining security. OpenShell supports popular frameworks including Codex, Claude Code, Pi and Hermes, and functions as the runtime layer within the larger NVIDIA Open Agent Safety Platform, which extends protection across application, runtime and infrastructure layers, the company says. Organizations like Cadence, Slack, and Gecko Robotics are already adopting OpenShell across applications ranging from chip design to physical AI. NVIDIA OpenShell 0.1.0 Enforces Runtime Controls for AI Agents NVIDIA OpenShell 0.1.0 manages agent sandboxes by restricting outbound communication to configured services, a capability important for long-running AI tasks. The system employs operating-system kernel controls to limit file access and prevent privilege escalation within these sandboxes,…
Excerpt shown under the publisher's RSS terms · 145 words · full text and figures are on the publisher's site
Related coverage

Where Security Fits in an AI Agent Stack
NVIDIA · Aug 21, 2026

NVIDIA Nemotron 3 Ultra Powers Faster, More Efficient Reasoning for Long-Running Agents
NVIDIA · Jun 4, 2026
[AINews] OpenAI DevDay 2026: Dots, 6.1 Sol, Ultrafast, Decisions API, Agents API, Spaces, Marketplace, and 1.2 Billion ChatGPT WAU
Latent Space · Sep 30, 2026

Secure agent access in development workflows with 1Password + NVIDIA OpenShell
1Password · Sep 28, 2026