NVIDIA 发布 OpenShell 0.1.0 为 AI 智能体添加运行时控制
原标题：Add Runtime Controls to AI Agents with NVIDIA OpenShell
AI 摘要
NVIDIA 发布开源运行时 NVIDIA OpenShell 0.1.0，用于为 AI 智能体定义并强制执行可访问的系统与数据权限，结合沙箱执行、受控服务访问、凭证管理和形式化策略分析。该运行时支持 Codex、Claude Code、Pi、Hermes 等框架，并已被 Cadence、Slack、Gecko Robotics 等企业用于芯片设计、企业自动化和物理机器人等场景。OpenShell 通过 Gateway、Supervisor、Sandbox 三个组件在智能体工作负载之外实施权限控制，并记录 OCSF 审计轨迹。
正文节选
AI agents can be given a goal, write code, use tools, and keep working as new information becomes available. This opens the door to applications that investigate software failures, run experiments, and carry out business-critical actions and research over days or weeks. Useful agents need access to workspaces, compute resources, data, credentials, and external services. But broader access also creates more consequential failure modes, from changing production data or exposing confidential inform