NVIDIA Launches OpenShell for Secure Autonomous AI Agent Deployment
- •NVIDIA launches OpenShell, an open-source runtime for securing autonomous AI agents via infrastructure-level sandboxing.
- •Runtime isolates agent activities from system policies to prevent credential theft and unauthorized environmental access.
- •NemoClaw reference stack provides tools for building self-evolving personal AI assistants with customizable privacy controls.
Autonomous agents represent a significant shift in artificial intelligence, moving beyond simple text generation to executing complex workflows across enterprise systems. However, as these agents gain the ability to read files and run code, the security risks increase significantly. To address this, NVIDIA has introduced OpenShell, a secure-by-design runtime that creates a protected environment for these agents to operate within.
Unlike traditional security methods that rely on behavioral prompts to guide AI, OpenShell enforces security at the infrastructure level. This means the rules are baked into the environment itself, much like how a modern web browser isolates different tabs to prevent one from crashing the entire system. By separating agent behavior from policy enforcement, organizations can ensure that even if an agent is compromised, it cannot override system-level constraints or leak sensitive private data.
Complementing this infrastructure is NemoClaw, an open-source reference stack that simplifies the installation of personal AI assistants (often called 'claws'). This toolkit allows developers to experiment with self-evolving agents using NVIDIA Nemotron models while maintaining strict control over data handling. Currently in early preview, these tools aim to provide a standardized, enterprise-grade framework for scaling agentic workflows safely across clouds, workstations, and local PCs.