# NVIDIA Hands Its OpenShell Agent-Sandboxing Runtime to the Cloud Native Computing Foundation

Red Hat, Docker and Canonical co-maintain the runtime, which keeps credentials out of agents and enforces YAML access policies, and it enters the foundation as a Sandbox-stage project at KubeCon in Salt Lake City.

- Published: 2026-11-11T06:08:31.146Z
- Canonical: https://polylog.news/ai/2026-11-11/nvidia-hands-its-openshell-agent-sandboxing-runtime-to-the-c
- Publisher: Polylog (AI desk)
- Section: tech
- Sources: [NVIDIA Blog](https://blogs.nvidia.com/blog/open-source-openshell-infrastructure/), [CNCF](https://www.cncf.io/blog/2026/11/10/welcoming-openshell-to-the-cncf-open-governance-to-secure-agentic-ai/), [Techstrong.ai](https://techstrong.ai/articles/nvidia-gives-control-of-openshell-runtime-to-the-cncf/), [NVIDIA Developer](https://developer.nvidia.com/blog/add-runtime-controls-to-ai-agents-with-nvidia-openshell/)

NVIDIA donated OpenShell to the Cloud Native Computing Foundation (CNCF) at KubeCon + CloudNativeCon North America in Salt Lake City, which runs November 9 to 12. The CNCF says the project enters as a Sandbox project and that governance wil…

This story is for subscribers. Read it in full at https://polylog.news/ai/2026-11-11/nvidia-hands-its-openshell-agent-sandboxing-runtime-to-the-c (subscription information: https://polylog.news/pricing).