{
 "schema_version": 1,
 "generated": "2026-10-25",
 "repo": "NVIDIA/OpenShell",
 "name": "OpenShell",
 "owner": "NVIDIA",
 "slug": "nvidia-openshell",
 "github": "https://github.com/NVIDIA/OpenShell",
 "what": "OpenShell is NVIDIA's open-source runtime for running autonomous AI agents safely. Each agent gets an isolated sandbox where kernel controls confine file access and system calls, every network connection passes a policy check, and real credentials are only added to requests bound for approved endpoints. Policy changes are checked with formal verification and risky new access waits for human review.",
 "why": "20k stars, picked up by one AI source we track",
 "language": "Rust",
 "requirements": [
  "Linux, macOS on Apple Silicon, or Windows with WSL 2 (experimental)",
  "Docker, Podman, or host virtualization",
  "An agent to run inside the sandbox; the default image is minimal Ubuntu with no agent installed",
  "For Kubernetes: Helm and a CNI that enforces NetworkPolicy"
 ],
 "audience_note": "Developers and platform teams who want coding agents to install packages, call APIs and use credentials without giving them the whole machine.",
 "risk": "none",
 "section": "earlier",
 "weekly_rank": null,
 "category": "Software and DevOps",
 "url": "https://dedupedai.com/use-cases/nvidia-openshell/",
 "use_case_count": 3,
 "use_cases": [
  {
   "id": "nvidia-openshell--run-a-coding-agent-in-an-openshell-sandbox",
   "title": "Run a coding agent in a locked-down sandbox",
   "best": true,
   "url": "https://dedupedai.com/use-cases/nvidia-openshell/run-a-coding-agent-in-an-openshell-sandbox/",
   "json": "https://dedupedai.com/use-cases/u/nvidia-openshell/run-a-coding-agent-in-an-openshell-sandbox.json"
  },
  {
   "id": "nvidia-openshell--keep-api-keys-away-from-your-agents",
   "title": "Let agents use API keys they can never see",
   "best": false,
   "url": "https://dedupedai.com/use-cases/nvidia-openshell/keep-api-keys-away-from-your-agents/",
   "json": "https://dedupedai.com/use-cases/u/nvidia-openshell/keep-api-keys-away-from-your-agents.json"
  },
  {
   "id": "nvidia-openshell--teach-your-agent-to-write-openshell-policies",
   "title": "Teach your coding agent to drive Open Shell",
   "best": false,
   "url": "https://dedupedai.com/use-cases/nvidia-openshell/teach-your-agent-to-write-openshell-policies/",
   "json": "https://dedupedai.com/use-cases/u/nvidia-openshell/teach-your-agent-to-write-openshell-policies.json"
  }
 ],
 "disclaimer": "Third-party repos we don't own or vouch for. AI-generated use cases can be wrong: review everything and run at your own risk."
}