nvidia/openshell

[!重要] OpenShell 0.1.x 新增内容： 稳定的发布节奏、新的隔离原语、扩展的表面和新的 API。阅读 0.1.0 升级指南。

OpenShell 是为自主 AI 代理队伍提供的安全私密运行时。代理在能够读取文件、安装包、调用 API 和使用凭证时最有用。OpenShell 赋予他们这些能力，但不允许他们无限制访问你的数据、秘密或网络。你在策略中声明每个代理可以触及的内容，OpenShell 会强制执行。

工作原理

OpenShell 通过两种方式规范代理的功能：它通过内核在运行时对每次文件访问、系统调用和网络连接强制执行策略;以及通过形式验证检查策略变更允许的范围，然后才会应用。

• 内核级强制执行。 每个代理运行在一个隔离的沙箱中。内核控制限制其访问的文件和系统调用，每个网络连接在离开沙箱前都会经过策略检查。代理从未看到真实凭证;OpenShell 只将凭证添加到绑定到批准端点的请求中。

[!IMPORTANT] New in OpenShell 0.1.x: a stable release cadence, new isolation primitives, an expanded extension surface, and new APIs. Read the 0.1.0 upgrade guide.

OpenShell is the safe, private runtime for fleets of autonomous AI agents. Agents are most useful when they can read files, install packages, call APIs, and use credentials. OpenShell gives them that capability without giving them unrestricted access to your data, secrets, or network. You declare what each agent can touch in a policy, and OpenShell enforces it.

How It Works

OpenShell governs what agents can do in two ways: it instruments the kernel to enforce policy on every file access, system call, and network connection at runtime, and it uses formal verification to check what a policy change would allow before it is applied.

• Kernel-level enforcement. Each agent runs in an isolated sandbox. Kernel controls confine which files it can access and which system calls it can make, and every network connection passes through a policy check before it leaves the sandbox. Agents never see real credentials; OpenShell adds them only to requests bound for approved endpoints.
• Formally verified policy changes. Before a policy change is approved, OpenShell uses formal verification to flag risky new access it would grant, such as reaching a new host with credentials or calling a new API method, so those changes wait for human review.

See Architecture for how the gateway, supervisor, and sandbox fit together.

Quickstart

You need Linux, macOS on Apple Silicon, or Windows with WSL 2 (experimental), plus Docker, Podman, or host virtualization. See the Support Matrix for details.

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | sh
openshell sandbox create --name demo