Issues

• feat(policy): adopt image policy only during initial sandbox setup

  NVIDIA/OpenShell#4381 · Filter by author johntmyers opened on Oct 9, 2026

• bug: sandbox SSH rejects loopback reverse port forwarding

  state:triage-needed
  NVIDIA/OpenShell#4379 · Filter by author cjagwani opened on Oct 9, 2026
  5

• bug(docs): supervisor middleware docs no longer name the base capability that Describe must return

  state:triage-needed
  NVIDIA/OpenShell#4378 · Filter by author SoniaMehta14 opened on Oct 9, 2026

• feat(isolation): publish independently usable backend protocol contracts

  NVIDIA/OpenShell#4374 · Filter by author drew opened on Oct 9, 2026

• token_grant: support client_id so client_credentials works with Microsoft Entra federated credentials

  state:triage-needed
  NVIDIA/OpenShell#4372 · Filter by author maxesse opened on Oct 9, 2026

• bug(kubernetes): sandbox stuck at Provisioning with replicas: 0 has no recovery path (start/stop both refuse)

  state:triage-needed
  NVIDIA/OpenShell#4371 · Filter by author midokura-silvia opened on Oct 9, 2026

• Hard-coded 5-minute provisioning/bootstrap deadlines make sandboxes unusable on slow isolation backends (CoCo/peer-pods)

  state:triage-needed
  NVIDIA/OpenShell#4364 · Filter by author eformat opened on Oct 9, 2026

• bug(driver-vm): starting a process, a first file read and a first memory touch are 2-3x slower than in a plain microVM

  state:triage-needed
  NVIDIA/OpenShell#4363 · Filter by author balajinvda opened on Oct 9, 2026
  3

• feat(driver-vm): let operators set how soon a supervisor sees a policy change

  state:triage-needed
  NVIDIA/OpenShell#4361 · Filter by author balajinvda opened on Oct 9, 2026
  1

• Credential Issuer Interface

  roadmap
  NVIDIA/OpenShell#4358 · Filter by author johntmyers opened on Oct 9, 2026

• Allow use of GitHub App access tokens

  state:triage-needed
  NVIDIA/OpenShell#4356 · Filter by author deeno35 opened on Oct 8, 2026

• bug(agents): OpenCode principal-engineer-reviewer is out of date with the Claude copy

  NVIDIA/OpenShell#4354 · Filter by author matthewgrossman opened on Oct 8, 2026

• feat(isolation): cut over the built-in sandbox to the delegated wire contract

  NVIDIA/OpenShell#4353 · Filter by author drew opened on Oct 8, 2026

• feat(supervisor): hold reconnect while a sandbox is suspended by its backend

  state:triage-needed
  NVIDIA/OpenShell#4352 · Filter by author mayawang opened on Oct 8, 2026

• feat: Firecracker compute driver — reuse the VM guest model with jailer, OCI images and full sandbox lifecycle

  state:triage-needed
  NVIDIA/OpenShell#4351 · Filter by author thukabjj opened on Oct 8, 2026

• feat: add operator-only provider credential retrieval over mTLS

  area:gateway
  NVIDIA/OpenShell#4349 · Filter by author sjenning opened on Oct 8, 2026

• test(oci): move OCI image USER/WORKDIR checks into a shared tmachine feature suite

  area:buildstate:pr-openedtopic:testing
  NVIDIA/OpenShell#4346 · Filter by author matthewgrossman opened on Oct 8, 2026

• bug(kubernetes): existing sandbox bootstrap images remain stale after gateway upgrade

  NVIDIA/OpenShell#4341 · Filter by author purp opened on Oct 8, 2026
  2

• ci: check issue acceptance for community pull requests

  NVIDIA/OpenShell#4339 · Filter by author elezar opened on Oct 8, 2026

• bug: Gator routes unmerged PR security regressions into private triage

  NVIDIA/OpenShell#4337 · Filter by author johntmyers opened on Oct 8, 2026

• fix(release): qualify manually pushed prerelease tags

  NVIDIA/OpenShell#4334 · Filter by author SDAChess opened on Oct 8, 2026

• feat: define annotation namespaces and gateway-enforced ownership

  NVIDIA/OpenShell#4333 · Filter by author elezar opened on Oct 8, 2026

• feat(sdk/ts): SandboxRef omits the sandbox creation time

  state:accepted
  NVIDIA/OpenShell#4332 · Filter by author fbricon opened on Oct 8, 2026

• Closed TCP listening socket stays in LISTEN inside the sandbox until another bind on the same port

  state:triage-needed
  NVIDIA/OpenShell#4331 · Filter by author AnshDevelops opened on Oct 8, 2026

• feat: design and implement administrator-controlled CDI device admission

  NVIDIA/OpenShell#4327 · Filter by author elezar opened on Oct 8, 2026