Tag / The engineering notebook
Sandboxing
1 article or note on this topic.
NVIDIA OpenShell: Policy-Enforced Sandboxes for Autonomous Coding Agents
NVIDIA just open-sourced OpenShell, a policy-enforced sandbox for autonomous AI agents. Four security layers, a privacy router that decides which LLM sees which data, and hot-reloadable YAML policies. How it works and what it solves that nothing else does.