OpenShell releases v0.0.33, NVIDIA's AI Agent sandbox adds libkrun micro VM driver

ME News message: On April 21 (UTC+8), according to Dongcha Beating monitoring, NVIDIA’s open-source AI Agent sandbox runtime OpenShell has released v0.0.33. The project uses YAML policies to control file access, data exfiltration, and network requests within the sandbox, providing secure isolation for running code with autonomous agents. This version adds a standalone libkrun compute driver, and further strengthens the sandbox’s seccomp filtering, inference routing, and process count limits. Previously, OpenShell’s compute backend was Kubernetes, with a K3s cluster running in a single Docker container at the bottom layer. libkrun is a KVM-based micro VM library; its startup speed is close to that of containers, and its isolation level aligns with virtual machines. For untrusted code executed by agents, this adds an extra kernel-level boundary beyond containers. The project has accumulated 5.2k stars on GitHub and adopts the Apache 2.0 license. The official README notes that it is still in the alpha stage, and currently supports only the single-player mode with a single developer, single environment, and single gateway. (Source: BlockBeats)