Search results

feat: pre-register prometheus metrics at startup so /metrics is never empty

Status: Open.

#1119 In NVIDIA/OpenShell;

· TaylorMutch opened on May 1, 2026

Bug: PATH override can hijack privileged ip and nsenter helpers

Status: Open.

#1113 In NVIDIA/OpenShell;

· drew opened on May 1, 2026

feat(proxy): resolve policy-allow-listed TCP hostnames inside the sandbox so non-HTTP protocols are reachable

state:triage-neededOpened without agent diagnostics and needs triageOpened without agent diagnostics and needs triage

Status: Open.

#1107 In NVIDIA/OpenShell;

· waterworthd-cim opened on May 1, 2026

feat(policy): suggest L7 scoping for known REST hosts

area:policyPolicy engine and policy lifecycle workPolicy engine and policy lifecycle work

area:sandboxSandbox runtime and isolation workSandbox runtime and isolation work

state:agent-readyApproved for agent implementationApproved for agent implementation

topic:l7Application-layer policy and inspection workApplication-layer policy and inspection work

Status: Open.

#1099 In NVIDIA/OpenShell;

· zredlined opened on Apr 30, 2026

feat(tui): render policy proposal inbox metadata

area:policyPolicy engine and policy lifecycle workPolicy engine and policy lifecycle work

area:tuiTerminal UI workTerminal UI work

state:agent-readyApproved for agent implementationApproved for agent implementation

Status: Open.

#1098 In NVIDIA/OpenShell;

· zredlined opened on Apr 30, 2026

feat(gateway): persist and validate agent policy proposal operations

area:gatewayGateway server and control-plane workGateway server and control-plane work

area:policyPolicy engine and policy lifecycle workPolicy engine and policy lifecycle work

state:agent-readyApproved for agent implementationApproved for agent implementation

Status: Open.

#1097 In NVIDIA/OpenShell;

· zredlined opened on Apr 30, 2026

feat(policy): add proposal provenance, operations, and guidance fields to proto

area:gatewayGateway server and control-plane workGateway server and control-plane work

area:policyPolicy engine and policy lifecycle workPolicy engine and policy lifecycle work

state:agent-readyApproved for agent implementationApproved for agent implementation

Status: Open.

#1096 In NVIDIA/OpenShell;

· zredlined opened on Apr 30, 2026

docs(agent): ship static sandbox policy advisor skill

area:docsDocumentation and examplesDocumentation and examples

area:policyPolicy engine and policy lifecycle workPolicy engine and policy lifecycle work

area:sandboxSandbox runtime and isolation workSandbox runtime and isolation work

state:agent-readyApproved for agent implementationApproved for agent implementation

Status: Open.

#1095 In NVIDIA/OpenShell;

· zredlined opened on Apr 30, 2026

feat(observability): enable OCSF JSONL for agent deny inspection

area:policyPolicy engine and policy lifecycle workPolicy engine and policy lifecycle work

area:sandboxSandbox runtime and isolation workSandbox runtime and isolation work

state:agent-readyApproved for agent implementationApproved for agent implementation

topic:observabilityLogging, metrics, and observability workLogging, metrics, and observability work

Status: Open.

#1093 In NVIDIA/OpenShell;

· zredlined opened on Apr 30, 2026

feat(policy): return draft chunk ids from policy proposal submit

area:gatewayGateway server and control-plane workGateway server and control-plane work

area:policyPolicy engine and policy lifecycle workPolicy engine and policy lifecycle work

state:agent-readyApproved for agent implementationApproved for agent implementation

Status: Open.

#1094 In NVIDIA/OpenShell;

· zredlined opened on Apr 30, 2026

feat(policy): expose sandbox-local policy.local API

area:cliCLI-related workCLI-related work

area:policyPolicy engine and policy lifecycle workPolicy engine and policy lifecycle work

area:sandboxSandbox runtime and isolation workSandbox runtime and isolation work

state:agent-readyApproved for agent implementationApproved for agent implementation

Status: Open.

#1092 In NVIDIA/OpenShell;

· zredlined opened on Apr 30, 2026

feat(policy): write effective sandbox policy for local agents

area:policyPolicy engine and policy lifecycle workPolicy engine and policy lifecycle work

area:sandboxSandbox runtime and isolation workSandbox runtime and isolation work

state:agent-readyApproved for agent implementationApproved for agent implementation

Status: Open.

#1091 In NVIDIA/OpenShell;

· zredlined opened on Apr 30, 2026