https://cybertoolchain.io/tools/openshell New releases and features in OpenShell, tracked by The Cyber Toolchain. en Tue, 03 Nov 2026 19:24:39 GMT https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.7 https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.7 Tue, 03 Nov 2026 19:24:39 GMT OpenShell adds in-place Kubernetes sandbox updates, OTLP/HTTP export, per-collector auth headers, mutual TLS for OTLP, and containerized browser login via two new env vars⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Route sandbox egress through a private PKI by setting `[openshell.supervisor.network].additional_ca_bundle` to a PEM bundle, applying to every first-party compute driver.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Forward sandboxed agent OpenTelemetry traces to your collector without an egress rule by adding `[openshell.gateway.otlp.agent]` with `enabled = true` to `gateway.toml`; the supervisor tags each span with the sandbox id before forwarding. • Use OTLP/HTTP instead of gRPC for telemetry export by setting `protocol = "http/protobuf"` on `[openshell.gateway.otlp]` or any signal sub-table; gRPC remains the default. • Authenticate or route OTLP traffic by setting `headers` or `headers_file` on `[openshell.gateway.otlp]` or a signal table, so collectors like MLflow can receive relayed agent traces via `x-mlflow-experiment-id`. • Connect OTLP collectors over mutual TLS or private CAs by setting `ca_file`, and optionally `cert_file` and `key_file`, on `[openshell.gateway.otlp]` or a signal table. • Give each sandbox service a unique hostname when multiple gateways share a cluster by setting `service_hostname_format = "hashed"` under `[openshell.gateway]`; the previous `readable` default is unchanged. • Opt into a new supervisor TLS listener that lets declared HTTP and WebSocket sandbox services accept application traffic directly, bypassing the gateway; disabled by default. • The Rust, Go, Python, and TypeScript SDKs now send exec calls directly to the gateway replica that owns the sandbox when replica routing is enabled; Go also routes port-forward and SSH tunnel calls, and TypeScript routes port-forward. • The Python gRPC bindings now ship typed sync and async stubs, giving editors and type checkers visibility into concrete request and response types. Breaking changes: • OpenShell now emits only OCSF 1.8.0 records; deployments that relied on 1.1 or 1.3 records will now receive 1.8.0 records. The `ocsf_schema_version` setting, the gateway `schema_version` fields, Helm `server.ocsfLog.schemaVersion`, and `OPENSHELL_OTLP_OCSF_SCHEMA_VERSION` are deprecated and ignored; setting them logs a warning. • `config preflight` and gateway startup now reject an `[openshell.gateway.supervisor_pool]` table when the selected driver does not use shared supervision, and also reject a pool recovery timeout shorter than member failure detection. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.6 https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.6 Tue, 27 Oct 2026 17:56:58 GMT OpenShell v0.1.6 adds OCSF audit events, sandbox suspend/resume, shared Kubernetes supervisors, and new Helm chart fields.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `openshell sandbox suspend` and `openshell sandbox resume` commands to pause and resume sandboxes on supported compute drivers.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `supervisor_topology = "gateway"` under `[openshell.drivers.kubernetes]` to enable an experimental shared supervisor that hosts many sandboxes in one process as a pool that can take over a failed supervisor's sandboxes, with `supervisor.replicas` to set pool capacity. • Adds `binding_policy` setting (values: `allowlist` or `exact`) to require a middleware service to provide specific bindings such as request inspection. • Adds `server.extraEnv` to the Helm chart for passing extra environment variables, including Secret references, to the gateway container, and adds `pkiInitJob.podLabels` and `pkiInitJob.podAnnotations` to the Helm chart for the certificate hook pods. • Gateways now write OCSF audit events for authorization denials, accepted credentials, SSH session tokens, and sandbox token checks, and raise a High-severity finding when a sandbox credential looks misused. • Prerelease builds now publish to the snap's `latest/beta` channel; `OPENSHELL_VERSION=pre install.sh` installs from there. • Stable releases now tag the Go SDK module as `sdk/go/vX.Y.Z` so Go tooling and pkg.go.dev show real versions. Breaking changes: • Gateways now refuse to start unless OIDC, mTLS user or operator authentication, or gateway JWTs are configured; for trusted local development only, set `allow_unauthenticated_users = true` under `[openshell.gateway.auth]`. • New sandboxes on Kubernetes, Docker, Podman, and VM now open the control connection from sandbox to supervisor in the opposite direction; supervisor and sandbox runtime binaries must be upgraded together because older binaries reject the new sandboxes. • External isolation backends: `ResumeBoundaryRequest` field 3 is renamed from `allow_cold_start_fallback` to `restart_if_restore_fails`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.5 https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.5 Tue, 20 Oct 2026 17:28:32 GMT OpenShell v0.1.5 adds push-based config delivery (~100 ms), OCSF-over-OTLP export, virtiofs host mounts, per-sandbox mutation locks, and new CLI flags `--annotation` and `--e⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `config_delivery_mode = "push"` supervisor setting to receive configuration changes pushed over the gateway session in ~100 ms instead of up to 10 seconds; polling remains the default.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `[openshell.gateway.otlp.ocsf]` config block with `enabled = true` to export OCSF events as OTLP log records, and allows traces and OCSF events to be sent to separate OTLP endpoints. • Adds `--annotation KEY=VALUE` repeatable flag to `openshell sandbox create` for setting sandbox annotations from the CLI. • Adds `--env-from KEY[=ENVVAR]` flag to `openshell sandbox create` to pass sandbox environment variables from the caller's environment without putting values on the command line. • Adds `OPENSHELL_OCSF_JSON=1` gateway audit sink, now available on all platforms. • Adds `enable_bind_mounts = true` setting in `[openshell.drivers.vm]` to allow MicroVM sandboxes to mount host directories through virtiofs; supports up to 3 mounts on x86_64 or 32 on aarch64 (QEMU-backed and GPU launches are not supported). • Adds `supervisor_network_mode` setting for the Docker supervisor to enable bridge networking (host networking remains the default). • Adds `allowed_pod_annotations` and `allowed_pod_labels` settings in `[openshell.drivers.kubernetes]` to allowlist pod annotation and label keys used in sandbox templates. • Adds `server.dataStorageSize` and `server.dataStorageClass` Helm values to configure the gateway data PVC. • Gateway mutation locks are now scoped per workspace and sandbox with bounded waits, preventing bursts of supervisor reconnects from queuing behind a single fleet-wide lock. Breaking changes: • Supervisor OCSF log files are renamed from `openshell-ocsf.YYYY-MM-DD.log` to `openshell-ocsf.YYYY-MM-DD.jsonl`; update any collector glob patterns from `openshell-ocsf.*.log` to `openshell-ocsf.*.jsonl`. Old `.log` files are not migrated. • On Kubernetes, sandbox templates that set pod annotations or labels are now rejected unless an operator allowlists the keys with `allowed_pod_annotations` and `allowed_pod_labels` in `[openshell.drivers.kubernetes]`. API and SDK callers setting `SandboxTemplate.labels` or `SandboxTemplate.annotations` (including recovery of timed-out sandboxes) are affected; the `openshell` CLI and `--label` metadata labels are not. • The gateway now rejects annotation keys with the reserved `internal.openshell.ai/` prefix on `CreateSandbox` and `UpdateConfig`. • The Go SDK's SandboxInterface.Create() and CreateFromTemplate() now take functional options (WithLabels(), WithAnnotations(), WithServiceExposures()) instead of a positional labels argument; the `CreateOptions` struct has been removed. Call sites must be updated. • External compute drivers that provision `openshell-sandbox` must update their bootstrap descriptor field from `outer_fence` to `provisioning_evidence`. • The snap no longer enables the user gateway service globally; after a direct snap install or if an older revision enabled it globally, run `sudo systemctl disable --global snap.openshell.user-gateway.service` once, then `systemctl --user enable --now snap.openshell.user-gateway.service` from the single account that should run the gateway. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4 https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4 Tue, 13 Oct 2026 20:48:39 GMT v0.1.4 adds gRPC server reflection, operator-only credential retrieval, stable credential placeholders, CLI label management, TypeScript log streaming, and Python sandbox sta⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds gRPC server reflection (v1 protocol) to the gateway, enabling `grpcurl -plaintext localhost:18080 list` and schema introspection without supplying proto files.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds operator-only provider credential retrieval so privileged identities can fetch provider credentials without exposing them to sandbox workloads. • Adds `createdAtMs` field to `SandboxRef` in the TypeScript SDK for millisecond-precision sandbox creation timestamps. • Adds `watchLogs` with loss-aware resume to the TypeScript SDK for streaming sandbox logs that automatically reconnects and tracks gaps. • Exposes sandbox status conditions in the Python SDK so callers can inspect structured lifecycle state. • Adds CLI label creation and filtering for providers, enabling operators to tag and query providers by label. • Adds snap gateway as a user service by default, removing the need for system-level privileges on snap-based installs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3 https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3 Fri, 09 Oct 2026 15:22:35 GMT OpenShell v0.1.3 adds OCI provider, OCSF JSONL audit events, bearer passthrough, OTLP sandbox traces, Ctrl-D detach, and gateway capacity metrics.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `feat(sandbox): add main restart policy` — configure a restart policy for the primary sandbox process.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `feat(cli): detach sandbox sessions with Ctrl-D` — press Ctrl-D to detach from a running sandbox session without terminating it. • Adds `feat(server): write gateway OCSF events to JSONL` — the gateway now emits structured audit events in OCSF JSONL format. • Adds `feat(helm): configure gateway OCSF JSONL output` — Helm values expose controls for enabling and routing the gateway's OCSF JSONL audit stream. • Adds `feat(mcp): inspect requests with Tower-selected protocol profiles` — MCP request inspection now uses Tower-selected protocol profiles for policy evaluation. • Adds `feat(docker): support corporate proxy CA bundles` — Docker-based deployments can now supply corporate proxy CA certificates for outbound TLS validation. • Adds `feat(providers): add Oracle Cloud Infrastructure Generative AI provider profile` — OCI Generative AI is now a first-class provider profile. • Adds `feat(providers): serve sandbox config files on demand` — providers can now deliver configuration files into the sandbox at runtime on request. • Adds `feat(providers): add multiple tokens to one request` — a single outbound request can now carry tokens from multiple providers simultaneously. • Adds `feat(service): add bearer authorization passthrough` — the gateway service layer can forward bearer tokens from inbound requests to upstream endpoints. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.0 https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.0 Fri, 25 Sep 2026 21:49:01 GMT OpenShell v0.1.0 adds sandbox templates, VM HTTP proxy egress, structured list output, OCSF schema versioning, and EC/EdDSA JWKS support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--no-login-shell` flag to `openshell sandbox exec` to skip shell startup files when entering a sandbox.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--from` flag accepting a rootfs tar archive as the source for VM driver sandboxes. • Adds structured output to `openshell` list commands for machine-readable results. • Adds configurable OCSF schema version for SIEM backward compatibility. • Adds sandbox templates on the server, allowing reusable sandbox configuration to be defined once and referenced at creation time. • Supports corporate HTTP forward proxy egress for microVM sandboxes. • Supports EC and EdDSA keys in OIDC JWKS validation on the server. • Splits the Helm chart into separate gateway and workspace charts. • Adds a `defaults-without-telemetry` feature alias at build time, enabling telemetry-free builds without manual feature flag composition. • Broadens HTTP header mutation authority in middleware, expanding the extension surface for interceptors. • Defines an HTTP response pre-return interface in middleware for new extension hooks. • Preserves exact MCP revision allowlists in policy, enabling pinned MCP version enforcement. • Advertises compute resource capabilities from drivers, making sandbox resource metadata visible to the control plane. • Makes provider profiles authoritative, so profile definitions drive sandbox authentication rather than being advisory. • Delegates sandbox authentication to compute drivers, enabling driver-owned auth flows. • Makes the `e2e:kubernetes` target work transparently on OpenShift. • Separates public and contributor agent skill workflows in the `skills/` directory. • Adds Codex Security release qualification to the CI pipeline. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.115 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.115 Thu, 27 Aug 2026 18:03:17 GMT OpenShell v0.0.115 adds OTLP driver trace export, native Windows MXC compute, gateway identity in traces, and OCI SBOM/provenance attestations. • Exports Kubernetes driver traces over OTLP, enabling distributed tracing pipelines to ingest OpenShell gateway activity. • Adds a native Windows MXC compute driver with full server wiring, extending supported compute platforms to Windows MXC. • Tags exported traces with gateway identity so multi-gateway deployments can filter and correlate traces per gateway. • Publishes OCI SBOM and provenance attestations alongside release artifacts for supply-chain verification. • Unifies the local Kubernetes gateway workflow, streamlining Kubernetes-backed development environments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.113 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.113 Tue, 25 Aug 2026 15:04:30 GMT OpenShell v0.0.113 adds OTLP driver trace export for Docker and corporate CA trust for Podman sandbox HTTPS proxies. • Exports Docker driver traces over OTLP, enabling distributed tracing of sandbox container operations. • Trusts corporate CA certificates for HTTPS proxies and intercepted TLS within Podman-backed sandboxes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.111 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.111 Fri, 21 Aug 2026 18:49:57 GMT OpenShell v0.0.111 adds transparent TCP egress, DNS correlation, OTLP driver traces, and standalone first-party compute drivers. • Adds policy DNS correlation store for network policy decisions in Docker and Podman sandboxes. • Enables transparent TCP egress and policy DNS enforcement for Docker and Podman runtimes. • Exports Podman driver traces over OTLP for observability into sandbox compute activity. • Establishes direct TCP egress foundation for policy-governed outbound connections. • Adds standalone first-party compute drivers for sandbox execution. • Adds a canonical main process to the sandbox runtime. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.110 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.110 Thu, 20 Aug 2026 19:05:48 GMT OpenShell v0.0.110 adds OIDC device authorization for headless login, non-root sandbox identities, and persistent credential refresh in providers. • Supports OIDC device authorization grant flow for headless (browserless) login, enabling use in CI/CD and other non-interactive environments. • Allows non-root identities inside sandbox environments, expanding the range of workloads and privilege models that sandboxes can support. • Stores refresh credentials in credential drivers so providers can maintain long-lived credential sessions without re-authentication. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.109 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.109 Wed, 19 Aug 2026 14:53:09 GMT OpenShell v0.0.109 adds OCSF AI inference event emission via the `ai_operation` profile on `ApiActivity`, bumping OCSF schema to v1.8.0. • Emits AI inference events using the `ai_operation` profile on OCSF `ApiActivity` class [event class 6003], with the OCSF schema bumped to v1.8.0. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.106 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.106 Fri, 14 Aug 2026 18:47:08 GMT OpenShell v0.0.106 adds a complete Go SDK, a TypeScript SDK (@nvidia/openshell-sdk), and cert-manager external issuer with OpenShift passthrough Route support in Helm. • Adds a complete Go SDK with domain clients, authentication, and hardening support. • Adds a TypeScript SDK published as `@nvidia/openshell-sdk`. • Adds cert-manager external issuer integration and OpenShift passthrough Route support to the Helm chart deployment. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.105 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.105 Thu, 13 Aug 2026 15:02:32 GMT OpenShell v0.0.105 adds stop and start operations for sandboxes. • Adds `stop` and `start` operations to the `openshell sandbox` subcommand, enabling lifecycle control of running sandboxes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.104 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.104 Wed, 12 Aug 2026 15:02:17 GMT OpenShell v0.0.104 adds Windows compilation support, a credential-leak warning on `--env`, and a glibc-static supervisor variant. • Adds a warning when `--env` values passed to the CLI look like credentials, helping catch accidental secret exposure at the command line. • Adds Windows compilation support for the gateway and CLI components. • Adds a glibc-static supervisor libc variant for environments that require static linking. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.103 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.103 Tue, 11 Aug 2026 15:07:30 GMT OpenShell v0.0.103 adds static credential binding to proxy provider endpoints. • Adds the ability to bind static credentials to provider endpoints in the proxy, enabling credential injection for specific backend routes without dynamic resolution. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.101 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.101 Fri, 07 Aug 2026 14:59:45 GMT OpenShell v0.0.101 adds credential driver targets and a VM driver built from GitHub sources via Bazel. • Adds Bazel build targets for the credential driver, enabling it to be compiled as part of the standard build. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.99 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.99 Wed, 05 Aug 2026 15:33:04 GMT OpenShell v0.0.99 adds system CA root mode for sandboxes and honors OCI image working directories, plus a TCP_NODELAY latency fix. • Adds system CA root mode to the build, enabling sandboxes to trust the host's system certificate authorities. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.98 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.98 Tue, 04 Aug 2026 23:16:57 GMT OpenShell v0.0.98 adds OTLP trace export from VM driver sandboxes. • Exports driver traces from VM-backed sandboxes over OTLP for observability into sandbox execution. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.97 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.97 Mon, 03 Aug 2026 15:38:07 GMT OpenShell v0.0.97 adds gateway callback listener negotiation for compute and a prototype Bazel build system. • Adds gateway callback listener negotiation for the compute layer, enabling dynamic coordination between sandboxes and the gateway control plane. • Introduces a prototype Bazel build system, including OpenTelemetry crate targets, for an alternative build path. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.96 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.96 Fri, 31 Jul 2026 17:55:05 GMT OpenShell v0.0.96 adds supervisor middleware content guard, Kubernetes PVC storage class config, policy-first OCI image identity, workspace authorization, and OTLP gateway tracing. • Adds supervisor middleware content guard example for filtering or inspecting sandbox traffic at the supervisor layer. • Supports configuring a custom `storageClassName` for workspace PVCs in Kubernetes deployments. • Introduces policy-first OCI image identity resolution in the sandbox, giving security policies priority in image evaluation. • Wires authorization checks into the workspace model, enabling access control enforcement at the workspace level. • Exports gateway traces over OTLP, enabling distributed tracing observability for gateway activity. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.92 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.92 Mon, 27 Jul 2026 15:32:25 GMT OpenShell v0.0.92 adds JSON/YAML output for sandbox commands and corporate HTTP proxy egress routing. • Adds `--output json` and `--output yaml` flags to `sandbox get`, `sandbox status`, and `sandbox create` commands for machine-readable output. • Supports routing sandbox egress traffic through a corporate HTTP proxy via the gateway. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.90 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.90 Thu, 23 Jul 2026 15:17:32 GMT OpenShell v0.0.90 adds config key support to provider create/update forms in the TUI. • Adds config key support to provider create and update forms in the terminal UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.88 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.88 Tue, 21 Jul 2026 15:18:26 GMT OpenShell v0.0.88 adds a workspace resource model with scoping and membership controls. • Adds a workspace resource model with scoping and membership support, enabling structured multi-tenant workspace management. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.86 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.86 Fri, 17 Jul 2026 15:07:03 GMT OpenShell v0.0.86 adds AWS STS AssumeRole refresh, network egress middleware, and TUI panel navigation. • Adds AWS STS AssumeRole refresh strategy and aws-s3 profile support for cloud provider integrations. • Introduces supervisor middleware framework (RFC-0009) enabling extensible sandbox lifecycle hooks. • Adds network egress middleware via the supervisor middleware layer for controlling outbound sandbox traffic. • Enables Up/Down arrow key navigation across panels with overflow at list boundaries in the TUI. Breaking changes: • The `openshell policy prove` command and Z3 dependency have been removed; any workflow or script invoking `openshell policy prove` will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.85 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.85 Thu, 16 Jul 2026 15:12:41 GMT OpenShell v0.0.85 adds elevated gateway info surfacing to the gateway component. • Adds elevated gateway info to the gateway component, surfacing additional context for privileged gateway sessions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.82 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.82 Mon, 13 Jul 2026 15:33:45 GMT OpenShell v0.0.82 adds Kubernetes sidecar supervisor topology and PVC subPath driver config support. • Adds sidecar supervisor topology for Kubernetes deployments, enabling a new deployment model for supervisor processes. • Supports PVC subPath in driver configuration for Kubernetes, allowing more granular persistent volume claim targeting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.76 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.76 Fri, 03 Jul 2026 15:20:17 GMT OpenShell v0.0.76 adds SELinux bind-mount labels and numeric UID support in sandbox policies. • Adds SELinux label support for bind mounts in Docker and Podman container runtimes. • Enables numeric UIDs (in addition to named users) when specifying sandbox process identity in policies. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.75 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.75 Thu, 02 Jul 2026 15:17:46 GMT OpenShell v0.0.75 adds TLS termination for Envoy Gateway ingress and a new manifest-driven gator agent. • Adds TLS termination support for Envoy Gateway ingress via Helm, enabling encrypted traffic handling at the ingress layer. • Introduces a manifest-driven gator agent, allowing agent behavior to be defined and driven through declarative manifests. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.74 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.74 Wed, 01 Jul 2026 15:32:28 GMT OpenShell v0.0.74 adds a combined topology config surface for Kubernetes deployments. • Adds combined topology config surface for Kubernetes, enabling unified topology configuration in a single surface. • Breaking: removes `SandboxTemplate.volume_claim_templates` from the API — configurations referencing this field must be updated. Breaking changes: • The `SandboxTemplate.volume_claim_templates` field has been removed from the API Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.72 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.72 Mon, 29 Jun 2026 15:42:02 GMT OpenShell v0.0.72 adds AWS SigV4 proxy signing, JSON-RPC/MCP policy enforcement, and Kubernetes agent-sandbox v1beta1 support. • Adds proxy-side AWS SigV4 credential signing for CONNECT tunnels in sandbox environments. • Adds L7 policy enforcement for JSON-RPC and MCP traffic. • Supports Kubernetes agent-sandbox v1beta1 API. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.71 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.71 Fri, 26 Jun 2026 15:25:00 GMT OpenShell v0.0.71 adds support for out-of-tree compute drivers via a new server socket flag. • Supports out-of-tree compute drivers on the server via the new `--compute-driver-socket` flag. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.69 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.69 Wed, 24 Jun 2026 15:28:37 GMT OpenShell v0.0.69 adds AWS Bedrock as an inference provider, GCE metadata emulation, GPU count requests, and profile updates. • Adds AWS Bedrock as a recognized inference provider in sandbox and provider configurations. • Adds a GCE metadata emulator for Google Cloud sandbox environments. • Supports provider profile updates. • Enables GPU count requests via the CLI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.65 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.65 Wed, 17 Jun 2026 15:39:55 GMT OpenShell v0.0.65 adds TLS certificate hot-reload and DeepInfra as a built-in inference provider. • Supports TLS certificate hot-reload on the server, eliminating restarts when rotating certificates. • Adds DeepInfra as a built-in inference provider, expanding the set of natively supported LLM backends. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.62 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.62 Fri, 12 Jun 2026 15:35:56 GMT OpenShell v0.0.62 adds HA multi-replica gateway support and system registry with source indicators. • Adds reconciler lease to the gateway for high-availability multi-replica deployments. • Adds system registry support and source indicators to the gateway. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.59 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.59 Tue, 09 Jun 2026 20:07:17 GMT OpenShell v0.0.59 adds VM lifecycle extensions and an --env flag for sandbox environment variable injection. • Adds VM lifecycle extensions for managing virtual machine states. • New `--env` flag on `sandbox create` and `sandbox exec` commands enables passing environment variables into sandboxes. • Adds a generic output formatter across CLI commands, eliminating per-command `--output` flag duplication. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.58 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.58 Mon, 08 Jun 2026 15:39:54 GMT OpenShell v0.0.58 adds Kubernetes driver config passthrough, path-based auth style for providers, and local embeddings routing. • Supports driver config passthrough for Kubernetes deployments. • Adds `path` auth style option for providers v2 configuration. • Enables local embeddings route for inference. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.56 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.56 Thu, 04 Jun 2026 17:30:16 GMT OpenShell v0.0.56 adds multi-file sandbox uploads, a default runtime class for K8s sandbox pods, and Hermes Agent support. • Supports multiple `--upload` flags on `sandbox create`, enabling several files to be uploaded in a single command. • Adds `default_runtime_class_name` config option for the Kubernetes driver to set the runtime class on sandbox pods. • Adds Hermes Agent to the list of supported agents. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.55 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.55 Wed, 03 Jun 2026 16:04:14 GMT OpenShell v0.0.55 adds Google Vertex AI as an inference provider and introduces profile-backed policy visibility. • Adds Google Vertex AI as a supported inference provider. • Introduces profile-backed policy visibility, enabling policy inspection tied to user profiles. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.54 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.54 Tue, 02 Jun 2026 15:56:01 GMT OpenShell v0.0.54 adds anonymous usage telemetry opt-out and Kubernetes sandbox image pull secret support. • Adds anonymous usage telemetry with an opt-out mechanism for OpenShell deployments. • Supports sandbox image pull secrets in Kubernetes deployments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.53 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.53 Mon, 01 Jun 2026 21:16:57 GMT OpenShell v0.0.53 adds OIDC Bearer auth for the Python SDK, an agentic approval loop for policies, multi-device PCIe passthrough, and TUI pane scrolling. • Supports OIDC Bearer authentication on `SandboxClient` in the Python SDK. • Adds an agentic approval loop to the policy engine for human-in-the-loop control over agent actions. • Generalizes PCIe passthrough crate to support multi-device configurations. • Adds PageUp/PageDown scrolling to all panes in the terminal UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.52 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.52 Fri, 29 May 2026 17:03:54 GMT OpenShell v0.0.52 adds optional PostgreSQL backing store via Helm and a Nix development shell. • Adds optional PostgreSQL backing store configurable through the Helm chart. • Adds Nix development shell (flake) for reproducible dev environments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.51 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.51 Thu, 28 May 2026 15:32:57 GMT OpenShell v0.0.51 adds Docker provisioning progress events, configurable sandbox nproc limits, and handler-level gRPC auth enforcement. • Adds provisioning progress events for Docker sandboxes, giving visibility into container startup. • Declares gRPC authentication mode, scope, and role at the handler level and enforces them at the router. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.48 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.48 Mon, 25 May 2026 21:20:40 GMT OpenShell v0.0.48 adds automatic provider discovery derived from profiles. • Enables automatic provider discovery derived from profiles, reducing manual provider configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.47 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.47 Fri, 22 May 2026 15:29:19 GMT OpenShell v0.0.47 adds JSON/YAML output for gateway list and per-sandbox authentication to the gateway. • Adds JSON and YAML output format options to the `gateway list` CLI command. • Adds JSON output format to the `policy get` CLI command. • Enables per-sandbox authentication to the gateway. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.45 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.45 Wed, 20 May 2026 15:56:30 GMT OpenShell v0.0.45 adds configurable workspace PVC storage size and LSM compatibility checks in agent skills. • Adds configurable default workspace PVC storage size for Kubernetes deployments. • Adds LSM (Linux Security Module) compatibility checks to the review and spike agent skills. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.44 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.44 Tue, 19 May 2026 17:17:19 GMT OpenShell v0.0.44 adds JSON/YAML sandbox listing, mTLS for Podman, nftables network policy, cert generation, and credential refresh foundation. • Adds `-o json` and `-o yaml` output format flags to `sandbox list` for machine-readable sandbox enumeration. • Introduces `openshell-gateway generate-certs` command, replacing the previous `init-pki.sh` script for certificate generation in RPM deployments. • Enables mTLS support for the Podman compute driver, securing compute node communication. • Replaces iptables with nftables for sandbox network policy enforcement. • Injects `DENO_CERT` into the sandbox child environment, enabling custom CA trust for Deno-based sandboxes. • Adds resource version compare-and-swap (CAS) support to the database layer. • Introduces credential refresh foundation for providers, enabling automated credential rotation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.43 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.43 Mon, 18 May 2026 15:30:31 GMT OpenShell v0.0.43 adds OIDC auth, mTLS/HTTPS separation, interactive TTY streaming, TOML config, and ext4 sandbox disks. • Separates HTTPS from mTLS authentication on the server, enabling independent configuration of each transport security mode. • Adds OIDC authentication support to the TUI, allowing users to authenticate via identity providers from the terminal interface. • Adds bidirectional streaming for interactive TTY sessions in exec, enabling real interactive shell workflows. • Introduces a TOML configuration file for the gateway (RFC 0003), replacing or supplementing prior configuration methods. • Supports booting sandboxes from ext4 root disks in the VM layer, enabling persistent or custom disk-backed sandbox environments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.42 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.42 Fri, 15 May 2026 15:12:46 GMT OpenShell v0.0.42 adds Podman socket fallback and drops the SSH handshake secret. • Falls back to Podman socket automatically when Docker is unavailable, broadening container runtime support. Breaking changes: • The SSH handshake secret has been dropped (`refactor!(auth): drop SSH handshake secret`); any configuration or tooling that supplies or validates this secret will break on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.41 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.41 Thu, 14 May 2026 15:15:16 GMT OpenShell v0.0.41 adds agent-driven policy management, sandbox resource flags, and custom CA support for OIDC TLS. • Adds agent-driven policy management, enabling the agent to participate in policy enforcement decisions. • Adds sandbox resource flags to the CLI for controlling resource allocation when creating sandboxes. • Supports custom CA certificates for OIDC issuer TLS verification in Helm deployments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.40 https://github.com/NVIDIA/OpenShell/releases/tag/v0.0.40 Wed, 13 May 2026 15:26:51 GMT OpenShell v0.0.40 adds Kubernetes nodeSelector/toleration support and local-domain service routing in the gateway. • Supports `nodeSelector` and `tolerations` configuration for Kubernetes deployments via `platform_config`. • Adds local-domain service routing in the gateway, enabling resolution and routing to cluster-local services. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/openshell