# NVIDIA/OpenShell

> A safe, private runtime for autonomous AI agents: isolated sandbox containers governed by declarative YAML policies restricting filesystem, network, and process access. Manages credential injection for agents like Claude, Codex, OpenCode, and Copilot.

- Magnitude: 2.6 out of 10 — Cooling
- Stars: 20,975 total · +69 stars measured 2026-11-02, 00:10–23:06 UTC
- Star trust: star growth looks organic
- Category: AI agents · Language: Rust · License: Apache-2.0 · Created: 2026-02-24 · Last push: 2026-11-02
- GitHub: https://github.com/NVIDIA/OpenShell · Homepage: https://docs.nvidia.com/openshell/latest/ · Page: https://gitnova.dev/en/r/NVIDIA/OpenShell
- GitNova flagged it 24 days before it took off on Hacker News.

## Useful for

- Run a coding agent in an isolated sandbox with restricted network access
- Configure a YAML policy allowing only GET requests to the GitHub API
- Deploy the OpenShell gateway to Kubernetes via Helm chart

## Why it’s here

- Star-counter measurements on 2026-11-02 (UTC), 00:10–23:06: 20906 → 20975 stars (+69). This is the change over that interval.
- Interest is fading: the two-day pace is 20% of the previous week and a half.
- Hacker News: “Nvidia OpenShell” — 508 points, 11 days ago.
- About 8 forks a day — people are taking the code.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 2,056
- Issues and pull requests: 4,693
- Watchers: 75
- Average over the last week: 126 per day
- Usual pace: 354 per day
- Stars in the last hour (measured): 3
- Latest release: dev (2026-03-18)

## Stars per day, last 30 days (oldest → newest, today is partial)

2026-10-04 … 2026-11-02: 201, 118, 158, 187, 157, 126, 122, 134, 129, 134, 122, 103, 107, 89, 90, 109, 100, 230, 980, 926, 661, 325, 194, 219, 276, 85, 75, 77, 78, 69

## Magnitude by day, last 14 days

10-20 3.2, 10-21 4.3, 10-22 5.6, 10-23 6.5, 10-24 6.3, 10-25 5.6, 10-26 4.6, 10-27 4.0, 10-28 4.3, 10-29 4.2, 10-30 3.3, 10-31 3.0, 11-01 2.7, 11-02 2.7

## Hacker News

- Nvidia OpenShell — 508 points, 218 comments: https://news.ycombinator.com/item?id=50198675

## Similar by description

1. **anthropics/sandbox-runtime** — 1.7 · Cooling · Security · TypeScript · +14 stars measured 2026-11-02, 00:13–23:10 UTC
   A lightweight sandboxing tool that enforces filesystem, network and Unix socket restrictions on arbitrary processes at the OS level without containers, using sandbox-exec, bubblewrap and proxies.
   Full card: https://gitnova.dev/en/r/anthropics/sandbox-runtime.md
2. **google/ax** — 2.4 · Steady · AI agents · Go · +33 stars measured 2026-11-02, 00:12–23:07 UTC
   A declarative orchestrator for running autonomous AI agent workloads in a cluster, using a Kubernetes-like model with Task, Workspace, Gateway, and Model manifests. It sandboxes agents, pre-wires their environment, and restricts network…
   Full card: https://gitnova.dev/en/r/google/ax.md

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-11-02 23:16 UTC, updated every 30 minutes.