ArchestackGitHub ↗ (opens in a new tab)

#44th of 8 in Sandboxes

OpenShell

Policy-enforced sandbox runtime for autonomous agents with credential brokering

Documentation ↗ (opens in a new tab)Repository on GitHub ↗ (opens in a new tab)
Stars
15.7k
License
Apache-2.0
Last commit
Oct 2026
Last release
Oct 2026

Overview

Runs each agent in a sandbox with kernel-enforced limits on file access and system calls; every outbound connection passes a policy check, and agents never see real credentials, which a gateway injects only for approved endpoints. Policy changes are checked with formal verification before approval. Installs via a shell script on Linux, Apple Silicon macOS or WSL 2; Helm for Kubernetes; SDKs for Python, TypeScript, Go and Rust.

Who it is for: Platform teams running fleets of autonomous agents

Strengths

  • Credentials attached by the gateway only to approved endpoints; sandboxes never hold them
  • Formal verification flags risky new access before a policy change is applied
  • Kubernetes deployment via Helm; GPU use inside sandboxes documented
  • Python, TypeScript, Go and Rust SDKs plus agent skills via npx skills add

Weaknesses

  • Windows support is WSL 2 only and experimental
  • Default sandbox image is minimal Ubuntu with no agent; running one follows the docs walkthrough
  • Anonymous telemetry on by default; disable with OPENSHELL_TELEMETRY_ENABLED=false
  • Kubernetes installs require a CNI that enforces NetworkPolicy

What it needs

  • no GPU
  • Docker + Compose
  • Needs Docker, Podman or host virtualization
  • Models: any provider via routed inference credentials

Also in Sandboxes

See all 8
Also in Sandboxes
RankProjectScore
1LightpandaHeadless browser written in Zig for AI agents and scraping36.2k stars, AGPL-3.078 out of 100
2ObscuraRust headless browser with CDP, native rendering and stealth mode28.7k stars, Apache-2.071 out of 100
3NemoClawNVIDIA reference stack running OpenClaw and Hermes inside OpenShell sandboxes22.7k stars, Apache-2.071 out of 100
#5microsandboxLocal microVMs for untrusted code with fork, snapshot and SDKs8.6k stars, Apache-2.061 out of 100
#6Steel BrowserBrowser API that manages Chrome sessions for Puppeteer, Playwright and Selenium7.8k stars, Apache-2.060 out of 100