OpenShell: Kernel-Level Control of File and Network Access for AI Agents

Block unrestricted access to data and networks when autonomous AI agents perform practical tasks such as file reading, package installation, and API calls. Strictly limit the scope of access for each agent based on declared policies to reduce security risks.

Enforce file access and system calls in real time at the kernel level, and subject all network connections to policy checks. Actual credentials are injected only into requests directed to approved endpoints, and dangerous access is preemptively blocked through schema validation when policies are changed.

Runs on Linux, macOS, and Windows (WSL 2), and supports Python, TypeScript, Go, and Rust SDKs. Uses Helm charts for Kubernetes deployments and provides skill packages for coding agents to automate CLI operations and policy creation.