Issues

• openshell sandbox create timeout reports ConfigurationPending when the pod could not be scheduled

  state:triage-needed
  NVIDIA/OpenShell#5230 · Filter by author u0324020 opened on Nov 4, 2026

• Add an example provider profile for Hermes Agent (providers/hermes-agent.yaml)

  state:triage-needed
  NVIDIA/OpenShell#5229 · Filter by author u0324020 opened on Nov 4, 2026

• bug(compute): reconciliation rewrites unchanged sandboxes and advances resource_version, causing false UpdateConfig conflicts

  NVIDIA/OpenShell#5227 · Filter by author mrunalp opened on Nov 4, 2026

• bug(sdk): wait_ready is duplicated in the Rust SDK and treats Completed as ready

  NVIDIA/OpenShell#5225 · Filter by author elezar opened on Nov 3, 2026

• feat: restore driver-owned sandbox NetworkPolicies after edits and deletions

  state:triage-needed
  NVIDIA/OpenShell#5220 · Filter by author jhjaggars opened on Nov 3, 2026

• test(testkit): add cleanup hooks that run after pass, failure, or panic

  topic:testing
  NVIDIA/OpenShell#5218 · Filter by author matthewgrossman opened on Nov 3, 2026

• feat: include resolved Kubernetes workload image identity in OCSF events

  state:triage-needed
  NVIDIA/OpenShell#5215 · Filter by author aeilot opened on Nov 3, 2026
  1

• feat(observability): correlate agent traces with OpenShell enforcement and OCSF

  state:triage-needed
  NVIDIA/OpenShell#5210 · Filter by author afourniernv opened on Nov 3, 2026

• feat: gateway-less standalone mode for the 0.1.x sandbox (batch schedulers: LSF/Slurm with Apptainer or Docker)

  state:triage-needed
  NVIDIA/OpenShell#5206 · Filter by author jatin579 opened on Nov 3, 2026

• Support per-request AWS profile selection for SigV4 signing

  state:triage-needed
  NVIDIA/OpenShell#5205 · Filter by author sjoerdvanBommel opened on Nov 3, 2026

• Show the workload operating system, architecture, and execution restrictions

  NVIDIA/OpenShell#5201 · Filter by author shiju-nv opened on Nov 3, 2026

• feat: move the desktop compute drivers to the ai-openshell/desktop repository

  needs-rfc
  NVIDIA/OpenShell#5200 · Filter by author elezar opened on Nov 3, 2026
  1

• Policy DNS keeps the host's first nameserver from supervisor start, so all sandbox lookups fail after the host's DNS changes (e.g. VPN connect)

  state:acceptedstate:validated
  NVIDIA/OpenShell#5197 · Filter by author sideDesert opened on Nov 3, 2026
  1

• bug(kubernetes): stopped sandbox regresses to Provisioning after stop completes

  NVIDIA/OpenShell#5195 · Filter by author matthewgrossman opened on Nov 3, 2026

• Policy validation rejects mixed named + hostless (CIDR) endpoint scopes even though their destination classes are disjoint

  state:triage-needed
  NVIDIA/OpenShell#5193 · Filter by author PurpleCHOIms opened on Nov 3, 2026

• bug: avoidable broker round trips and full /proc sweeps on the mediated socket path

  state:accepted
  NVIDIA/OpenShell#5191 · Filter by author EmilienM opened on Nov 3, 2026

• bug: ResolvedWorkloadIdentity deserialization skips the non-root and ordering invariants of new()

  state:accepted
  NVIDIA/OpenShell#5189 · Filter by author EmilienM opened on Nov 3, 2026
  1

• bug: unsafe blocks in openshell-sandbox lack // SAFETY: comments and nothing enforces them

  state:accepted
  NVIDIA/OpenShell#5188 · Filter by author EmilienM opened on Nov 3, 2026

• bug: sigset_t is only partly initialized under musl before assume_init

  state:accepted
  NVIDIA/OpenShell#5187 · Filter by author EmilienM opened on Nov 3, 2026
  1

• bug: managed_children and the workload launcher mishandle a poisoned lock, a missing CONFIG_PROC_CHILDREN and a panicking job

  state:accepted
  NVIDIA/OpenShell#5186 · Filter by author EmilienM opened on Nov 3, 2026
  3

• bug: some calls fail or are interrupted inside the sandbox but work natively (rt_sigqueueinfo, self-directed kill, sched_setaffinity, prlimit64, nice)

  state:accepted
  NVIDIA/OpenShell#5185 · Filter by author EmilienM opened on Nov 3, 2026
  1

• bug: exec pipes and PTY masters read through the shared blocking pool, and the disconnect path scans /proc on a runtime worker

  state:accepted
  NVIDIA/OpenShell#5184 · Filter by author EmilienM opened on Nov 3, 2026
  1

• bug: a transient accept error ends the boundary control listener or the DNS TCP relay

  state:accepted
  NVIDIA/OpenShell#5183 · Filter by author EmilienM opened on Nov 3, 2026
  1

• bug: unbounded per-connect procfs work in binary identity resolution

  state:accepted
  NVIDIA/OpenShell#5182 · Filter by author EmilienM opened on Nov 3, 2026
  1

• bug: every mediated open/openat shares one broker thread with connect-time identity work

  state:accepted
  NVIDIA/OpenShell#5181 · Filter by author EmilienM opened on Nov 3, 2026