NVIDIA Donates OpenShell, Its AI Agent Security Runtime, to CNCF as a Sandbox Project: Cedar Policies and an Agent Substrate Integration With Google
At KubeCon North America on November 10, NVIDIA contributed OpenShell, its open-source security runtime for AI agents, to CNCF as a Sandbox project. OpenShell enforces access to files, networks, credentials, and model endpoints in the infrastructure outside the agent. The project is moving from NVIDIA's GitHub to the neutral ai-openshell organization and is adopting Cedar, another CNCF project, as its policy language. NVIDIA is also contributing to Google-led Agent Substrate and released three open-source Kubernetes components: NVKE, NVKR, and Snapshot. Teams running agents on Kubernetes now get a vendor-neutral permission and isolation layer.

Key Takeaways
- Governance: OpenShell joins the CNCF Sandbox after a TOC vote passed on September 26; code moves to the neutral ai-openshell org, and the NVIDIA/OpenShell repo stays in use until the move is done
- Scale: about 21K GitHub stars and 2,091 forks, written in Rust under Apache-2.0; NVIDIA says hundreds of organizations use it and it has received tens of thousands of contributions in under a year (vendor figures)
- Policy: it is adopting the CNCF project Cedar as its policy language; NVIDIA, Red Hat, Docker, and Canonical were early core contributors
- Ecosystem: NVIDIA is contributing to Google-led Agent Substrate, wiring in Dynamo and KAI Scheduler, and working with Google on an OpenShell plus Agent Substrate integration
- Companion tools: on HGX B300, Snapshot cut Crusoe's GLM-5.3 ready time from about 8 minutes to 31 seconds and Saturn Cloud's vLLM startup from 2-8.5 minutes to 6-34 seconds (partner figures)











