Nvidia built a sandbox prison so fleets of AI agents can work without eating the host

“Nvidia just shipped a prison for AI agents so they can have jobs.”

The Story

NVIDIA open-sourced OpenShell, a runtime that runs autonomous agent fleets in kernel-isolated sandboxes governed by declarative YAML policies (files, credentials, network). A full reference architecture pairs it with Vera CPUs, Rubin inference, and BlueField-4 “Sentry” hardware that can quarantine an agent in milliseconds. Anthropic, OpenAI, Meta, Microsoft and others are listed as working with it.

Why It Matters

We are industrializing the cage for agents. Useful work plus containment is becoming infrastructure, not a research paper.

Evidence

NVIDIA Newsroom, NVIDIA docs, The Next Web, HN

Sources

Daily scan: 2026-10-23