NVIDIA contributes OpenShell agent security runtime to CNCF
The AMW Read
The CNCF contribution expands the shared infrastructure available for governing and running agents, though its adoption and effectiveness remain to be tested.
NVIDIA contributes OpenShell agent security runtime to CNCF
NVIDIA is contributing OpenShell, its open-source runtime for securing autonomous agents, to the Cloud Native Computing Foundation (CNCF) as a Sandbox project. The company is also contributing to Agent Substrate, a Google-led framework for running long-lived agent workloads on Kubernetes. NVIDIA and Google are collaborating on an integration between the two projects.
The contributions bring agent security and workload management into the cloud-native ecosystem. OpenShell applies policies to agent activity, including tool use and access to inference services. Agent Substrate preserves agent environments between tasks while releasing compute resources during idle periods. Together, the projects address two practical barriers to operating agents across shared infrastructure: governing their actions and managing the resources they consume.
For builders, the proposed integration creates an option to assess for agent deployments across cloud and on-premises environments, alongside existing credential storage and monitoring systems. NVIDIA also introduced Snapshot to restore checkpointed inference replicas without repeating model loading or warmup. In partner tests reported by the company, Crusoe reduced workload readiness time from about eight minutes to 31 seconds on HGX B300 systems. Those results are specific to the reported test; teams should evaluate security controls and startup times against their own workloads.
