OpenShell contribution puts agent governance in focus

What happened: NVIDIA announced its contribution of OpenShell, an open-source runtime for securing and governing autonomous agents, to the Cloud Native Computing Foundation. Its report describes OpenShell as a CNCF Sandbox project and outlines deterministic controls over tool use, inference access and workload execution. It also discusses collaboration on Agent Substrate for long-running agent workloads on Kubernetes.

Why it matters: Agent security cannot depend only on a model following instructions. Runtime-enforced policies provide a separate control layer. Open development could help organisations inspect and integrate those controls across infrastructure providers.

Caveat: Sandbox status is an early project stage, not a production-security certification. Organisations still need threat modelling, access restrictions, operational testing and monitoring.

Dates: Announcement and source publication: 10 November 2026, around KubeCon. Included as recent infrastructure context, not breaking news from the past 24 hours.