Issues

• feat(docker): support workload image updates preserving sandbox identity and data

  state:triage-needed
  NVIDIA/OpenShell#5484 · Filter by author senthilr-nv opened on Nov 11, 2026

• feat(helm): let OpenShift assign the gateway's UID and fsGroup without value overrides

  state:triage-needed
  NVIDIA/OpenShell#5483 · Filter by author gaveezy opened on Nov 11, 2026

• feat: narrow filesystem access for child processes through the sandbox binary

  state:triage-needed
  NVIDIA/OpenShell#5482 · Filter by author Kimiyu-186 opened on Nov 11, 2026

• The persistent storage of gateway is considered to be placed in ETCD/k8s CR

  state:triage-needed
  NVIDIA/OpenShell#5481 · Filter by author laik opened on Nov 11, 2026

• chore(sdk/ts): migrate the TypeScript SDK to ai-openshell/sdk-typescript

  area:sdk:typescriptarea:sdk
  NVIDIA/OpenShell#5480 · Filter by author pimlock opened on Nov 11, 2026
  

• bug(kubernetes): sandboxes cannot start under the EKS Nitro Sandbox RuntimeClass because the workspace PVC is mounted at two paths

  state:triage-needed
  NVIDIA/OpenShell#5476 · Filter by author arun-elr opened on Nov 10, 2026

• Support Gateway-authenticated token grants with client-selected header formats

  state:triage-needed
  NVIDIA/OpenShell#5473 · Filter by author freeqaz-openai opened on Nov 10, 2026

• test(perf): decide whether to bring back the live-Internet and data-path benchmarks

  topic:testing
  NVIDIA/OpenShell#5472 · Filter by author matthewgrossman opened on Nov 10, 2026

• feat(observability): link sampled supervisor request spans to workload traces

  state:triage-needed
  NVIDIA/OpenShell#5471 · Filter by author afourniernv opened on Nov 10, 2026

• feat(driver-mxc): support sandbox exec and restart on Windows

  state:triage-needed
  NVIDIA/OpenShell#5468 · Filter by author getrou opened on Nov 10, 2026

• bug(sandbox): restrictive seccomp filter stacking remains blocked in v0.1.8 (follow-up to #4097)

  state:triage-needed
  NVIDIA/OpenShell#5467 · Filter by author SidShaytay opened on Nov 10, 2026

• feat(kubernetes): support caller-specified OCI image volumes in sandbox driver config

  state:triage-needed
  NVIDIA/OpenShell#5463 · Filter by author ralphbean opened on Nov 10, 2026
  2

• bug: sandbox logs and watch streams ignore gateway ownership in multi-replica mode

  area:gatewaytopic:observability
  NVIDIA/OpenShell#5462 · Filter by author FrostGod opened on Nov 10, 2026

• bug(docker): deleting a sandbox while it is starting fails with "volume is in use"

  area:drivers
  NVIDIA/OpenShell#5459 · Filter by author matthewgrossman opened on Nov 10, 2026

• bug: stop sandbox times out in Kubernetes E2E on Agent Sandbox v1alpha1

  NVIDIA/OpenShell#5457 · Filter by author elezar opened on Nov 10, 2026

• refactor: specify the boundary and supervisor-registration contracts compute drivers use

  area:gateway
  NVIDIA/OpenShell#5456 · Filter by author elezar opened on Nov 10, 2026

• feat(gateway-interceptors): reload the interceptor list from the gateway config on SIGHUP

  state:triage-needed
  NVIDIA/OpenShell#5453 · Filter by author airadier opened on Nov 10, 2026

• docs: standardize Markdown paragraph wrapping across the repository

  NVIDIA/OpenShell#5449 · Filter by author purp opened on Nov 10, 2026
  

• feat(gateway): support drop-in configuration fragments (gateway.d/*.toml)

  area:gatewaystate:accepted
  Enhancement

  NVIDIA/OpenShell#5446 · Filter by author elezar opened on Nov 10, 2026
  4

• ci(e2e): cut the VM install time of tmachine E2E suite rows

  area:buildtopic:testing
  NVIDIA/OpenShell#5438 · Filter by author matthewgrossman opened on Nov 10, 2026

• feat(vm): keep live directory shares confined on the host, even if the guest is compromised

  state:triage-needed
  NVIDIA/OpenShell#5437 · Filter by author SidShaytay opened on Nov 10, 2026
  1

• chore(e2e): migrate the Python SDK E2E suites in core to Rust

  NVIDIA/OpenShell#5435 · Filter by author pimlock opened on Nov 10, 2026

• feat: spread shared supervisors evenly across gateway replicas

  area:gatewayarea:supervisor
  NVIDIA/OpenShell#5434 · Filter by author FrostGod opened on Nov 9, 2026

• ci(e2e): shrink the Nix download of tmachine E2E suite rows

  area:buildtopic:testing
  NVIDIA/OpenShell#5433 · Filter by author matthewgrossman opened on Nov 9, 2026

• feat(cli): expose Kubernetes ephemeral-storage options when creating sandboxes

  state:triage-needed
  NVIDIA/OpenShell#5430 · Filter by author amfred opened on Nov 9, 2026