NVIDIA hands its agent-security runtime OpenShell to CNCF, adding a governance layer for agents on Kubernetes
Synopsis
At KubeCon + CloudNativeCon, NVIDIA said it is donating OpenShell, an open source runtime for securing and governing autonomous agents, to the Cloud Native Computing Foundation (CNCF) as a Sandbox project, while also contributing to Google-led Agent Substrate and releasing three new components of the DSX AI Factory Platform. OpenShell applies deterministic controls to agent activity so teams can enforce policies as agents use tools, access inference services and execute workloads, and its extensible architecture connects their own compute, inference providers, credential storage and monitoring tools. NVIDIA says hundreds of organizations have put OpenShell to use and the project has received tens of thousands of contributions in less than a year since launch.
Interpretation
NVIDIA is contributing OpenShell, an open source runtime for securing and governing autonomous agents, to the Cloud Native Computing Foundation, putting that security infrastructure in the community's hands to build, inspect and improve. That agent-security capability had been held by a single vendor; as a CNCF Sandbox project it will be governed by the organizations building it into their products and strengthened by security professionals worldwide. Jim Zemlin, CEO of the Linux Foundation, said in the announcement that the cloud-native community faces a new infrastructure challenge of giving agents secure environments in which to operate, and that bringing OpenShell into CNCF gives developers a shared foundation and a chance to shape how agent security evolves.
OpenShell gives organizations control over what AI agents can do, applying deterministic controls to agent activity so teams can enforce policies as agents use tools, access inference services and execute workloads. Its extensible architecture lets teams connect their own compute, inference providers, credential storage and monitoring tools, so governance can be applied across deployment environments and integrated with existing enterprise systems. NVIDIA says hundreds of organizations have put OpenShell to use, and the project has received tens of thousands of contributions in less than a year since launch.
Perspective
The report covers NVIDIA's KubeCon + CloudNativeCon announcement: the OpenShell donation to the CNCF Sandbox, participation in Agent Substrate, and the public preview and ecosystem integration plans for three DSX AI Factory Platform components. The intended reader is an engineer working on cloud-native AI infrastructure and agent deployment.
OpenShell adoption is stated as hundreds of organizations and tens of thousands of contributions, without specific benchmarks or comparison data; NVKE and NVKR are in public preview, and ecosystem partners describe integration plans rather than delivered capabilities.