Event ·Multi-source

NVIDIA 开源项目 OpenShell 进入 CNCF Sandbox

NVIDIA 宣布将 OpenShell 捐赠给 CNCF，进入 CNCF Sandbox 孵化，项目聚焦 AI agent 的运行时安全。OpenShell 为自主运行的 agent 提供策略隔离、网络控制和凭证管理三类能力，防止 agent 在执行代码时越权访问数据或泄露密钥。项目定位与 prompt 层的安全防护互补，主张把安全边界做在运行时层而非提示词层。CNCF Sandbox 是其孵化早期开源项目的入口，意味着该规范将由社区共同治理。对正在构建 agent 应用的开发者，这是一个可以直接贡献和落地的执行环境安全方案。

Current read

NVIDIA 把管 agent 执行安全的项目 OpenShell 交给 CNCF 了，做策略隔离、网络限制、凭证托管三件事。做 agent 的开发者可以看看，跟只在 prompt 层做防护的思路不一样，喜欢社区治理的可以去贡献代码。

11 sources29° AI heatLast updated 2026/11/10 20:52:33

Evidence

11 sources

Primary sourceNVIDIA AI

2026/11/10 20:52:33View source

Related source 1marktechpost

2026/11/9 17:09:54View source

Related source 2Techsauce

2026/11/10 05:12:54View source

Related source 3TestingCatalog

2026/11/10 10:00:14View source

Related source 4elvis

2026/11/10 17:17:16View source

Related source 5arXiv: Google DeepMind

2026/11/9 15:48:07View source

Related source 6Thomas Wolf

2026/11/9 17:30:25View source

Related source 7The Information

2026/11/9 18:30:06View source

Related source 8Together AI

2026/11/10 00:20:38View source

Related source 9The Rundown AI

2026/11/10 11:30:16View source

Related source 10Jim Fan

2026/11/10 16:07:43View source

Conflict check

Dedup data only shows that these sources discuss the same event, not that they agree. There is no structured supporting or refuting evidence yet, so no conflict is inferred automatically.

Open the story