NVIDIA Just Built a Sandbox That Knows When to Say No (Openshell)

Is Docker enough to keep AI coding agents secure? NVIDIA's OpenShell is a new open-source AI agent sandbox that goes beyond traditional Docker containers, giving control over what agents like Claude Code, Codex, and OpenCode can actually do. In this video, I test NVIDIA OpenShell on a Mac, walk through its installation and security policies, and demonstrate how it blocks unauthorized file access, network connections, and GitHub API requests while allowing approved actions. 🔗 Relevant Links Openshell Repo - https://github.com/NVIDIA/OpenShell Openshell Docs - https://docs.nvidia.com/openshell/latest/ ❤️ More about us Radically better observability stack: https://betterstack.com/ Written tutorials: https://betterstack.com/community/ Example projects: https://github.com/BetterStackHQ 📱 Socials Twitter: https://twitter.com/betterstackhq Instagram: https://www.instagram.com/betterstackhq/ TikTok: https://www.tiktok.com/@betterstack LinkedIn: https://www.linkedin.com/company/betterstack 📌 Chapters: 00:00 Why Docker Isn't Enough for AI Coding Agents 00:27 The Security Problem with Claude Code and Codex 01:00 What Is NVIDIA OpenShell? 01:21 How OpenShell's AI Sandbox Works 01:43 Live Demo: Blocking Unauthorized File Access 02:25 Default-Deny Network Security 02:50 Allowing Read-Only GitHub API Access 03:25 Blocking Unauthorized GitHub API Requests 04:05 Credential Injection and API Key Protection 04:40 Z3 Policy Verification and Runtime Security 05:15 NVIDIA OpenShell Usage and Security Statistics 05:40 OpenShell vs Docker, Anthropic, E2B, and Daytona 06:09 OpenShell Limitations, Telemetry, and Mac Setup 07:03 Should You Use NVIDIA OpenShell?