NVIDIA OpenShell is an open-source, secure-by-design runtime that executes autonomous AI agents inside kernel-level sandboxes governed by declarative policy. Agents such as OpenClaw, Claude Code, and Codex run unmodified while OpenShell enforces filesystem, network, and process controls with a full audit trail of every allow and deny decision.