Status basis: pypi_downloads_30d momentum fell to 0 per 3d from 77054 (<= 40% of the prior window)
- Cooling pypi_downloads_30d momentum fell to 0 per 3d from 77054 (<= 40% of the prior window)
- Cooling pypi_downloads_30d momentum fell to 0 per 3d from 77054 (<= 40% of the prior window)
- Cooling pypi_downloads_30d momentum fell to 0 per 3d from 77054 (<= 40% of the prior window)
- Accelerating pypi_downloads_30d gained 77054 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)
- Reactivated pypi_downloads_30d did not move for 7d, then gained 77054 in the last 3d
- Cooling pypi_downloads_30d momentum fell to 0 per 3d from 77054 (<= 40% of the prior window)
- Accelerating pypi_downloads_30d gained 77054 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)
- Reactivated pypi_downloads_30d did not move for 7d, then gained 77054 in the last 3d
- Accelerating pypi_downloads_30d gained 77054 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)
- Reactivated pypi_downloads_30d did not move for 7d, then gained 77054 in the last 3d
- Accelerating pypi_downloads_30d gained 77054 in the last 3d after a flat 3d baseline (no prior movement to compare a ratio against)
- Reactivated pypi_downloads_30d did not move for 7d, then gained 77054 in the last 3d
- first observed Kanon started keeping permanent history for this agent
| Machine-callable | — | unknown | — |
| Open source | 1 | verified | 1 quote(s) |
| Self-hostable | 1 | inferred | 1 quote(s) |
| Bring your own key | — | unknown | — |
| Autonomy level | 2 | inferred | 2 quote(s) |
| Pricing model | — | unknown | — |
| Integrations | docker,podman,wsl | inferred | 1 quote(s) |
“Unknown” means we have not verified it — it is not a “no”. Hard filters never treat unknown as false.
NVIDIA's hardware-backed security design positions it as a foundational infrastructure for trustworthy AI agent deployment.
Evidence quotesverbatim, from the product’s own materials
“public GitHub repository (README fetched)”— structural
“A supported host — Linux, macOS (Apple Silicon), or Windows with WSL 2”— readme
“sandboxed execution environments that protect your data”— readme
“governed by declarative YAML policies”— readme
“Docker, Podman, or host virtualization enabled for MicroVM-backed sandboxes”— readme
FAQ
What is OpenShell?
OpenShell provides a secure, private runtime environment for autonomous AI agents, enabling controlled execution with strong privacy safeguards.
What does OpenShell do?
Host autonomous AI agents in a secure runtime environment to ensure privacy and control.
Why does OpenShell matter?
NVIDIA's hardware-backed security design positions it as a foundational infrastructure for trustworthy AI agent deployment.
How much does OpenShell cost?
Not specified
Is OpenShell open source?
Yes — OpenShell is open source.
Can I self-host OpenShell?
Yes — OpenShell can be self-hosted.
What does OpenShell integrate with?
docker,podman,wsl
How popular is OpenShell?
As tracked by KanonAgent: 11.1k upvotes (first indexed 2026-07-08).
What are the best OpenShell alternatives?
Similar AI agents tracked by KanonAgent: Stealth Venture, taste-skill, archify, open-design, deer-flow, ruflo.