Nvidia Donates OpenShell AI Agent Security Runtime to CNCF

Nvidia announced this week at KubeCon + CloudNativeCon North America in Salt Lake City that it has donated OpenShell, its open-source runtime for securing and governing AI agents, to the Cloud Native Computing Foundation (CNCF). The project joins the CNCF as a Sandbox project, the foundation’s entry-level tier for early-stage projects. The CNCF formally accepted the project in late September.

Originally launched at Nvidia’s GTC conference in March, OpenShell runs AI agents inside a sandbox and enforces policies on which files, networks, credentials, and model endpoints those agents can access. Ali Golshan, Nvidia’s senior director of AI software, stated that choosing the CNCF was driven by the view that “Securing and creating trust around AI is really infrastructure.” He noted that the CNCF hosts mature infrastructure components like Kubernetes, aligning with OpenShell’s target users—platform teams already managing these cloud-native stacks.

This decision highlights the evolving landscape of AI infrastructure governance. While the Linux Foundation’s Agentic AI Foundation (AAIF) hosts protocols like MCP and A2A, Nvidia determined that OpenShell fit better within the CNCF’s cloud-native environment. Golshan explained that many necessary infrastructure pieces already existed in the CNCF, avoiding the need to build them from scratch. Currently, Red Hat, Docker, and Canonical have joined Nvidia as core contributors, with approximately 380 organizations contributing according to the CNCF project page.

Although OpenShell has entered the CNCF, its security governance is still being refined. Golshan mentioned that the team is working on establishing an independent security committee to handle issues like vulnerability disclosures. Jonathan Bryce, executive director of the CNCF, described neutral governance as “rocket fuel” for integration and adoption, helping to attract deeper community engagement.