🎯 Kernel-level enforcement

The items that name it 2

• NVIDIA/OpenShell — sandboxed runtime for autonomous AI agents
  repo

  Kernel instrumentation confines which files a sandboxed agent can access and which system calls it can make, and checks every outbound network connection against policy before it leaves the sandbox; credentials are injected only into requests bound for approved endpoints, never exposed to the agent

• NVIDIA OpenShell — secure runtime for autonomous AI agent fleets
  repo

  Kernel instrumentation enforces policy on every file access, system call, and network connection at runtime; each agent runs in an isolated sandbox with kernel controls confining file access and system calls, and network connections pass through a policy check before leaving the sandbox

In every workspace you can read 4