NVIDIA has released version v0.0.33 of OpenShell, an open-source AI Agent sandbox runtime, enhancing its security features. The update introduces libkrun, a micro-VM driver based on KVM, which offers virtual machine-level isolation with startup speeds akin to containers. This addition provides an extra kernel-level boundary for executing untrusted code, improving upon the previous Kubernetes-based compute backend. OpenShell now utilizes YAML-based policies to manage file access, data exfiltration, and network requests, ensuring secure isolation for autonomous agents. The project, which has garnered 5.2k stars on GitHub, remains in its alpha stage, supporting a single-player mode. It is available under the Apache 2.0 license.