Issues

• Policy validation rejects mixed named + hostless (CIDR) endpoint scopes even though their destination classes are disjoint

  state:triage-needed
  NVIDIA/OpenShell#5193 · Filter by author PurpleCHOIms opened on Nov 3, 2026

• bug: avoidable broker round trips and full /proc sweeps on the mediated socket path

  state:triage-needed
  NVIDIA/OpenShell#5191 · Filter by author EmilienM opened on Nov 3, 2026

• bug: the root allow-list is implemented twice and the audited helper has no caller

  state:triage-needed
  NVIDIA/OpenShell#5190 · Filter by author EmilienM opened on Nov 3, 2026

• bug: ResolvedWorkloadIdentity deserialization skips the non-root and ordering invariants of new()

  state:triage-needed
  NVIDIA/OpenShell#5189 · Filter by author EmilienM opened on Nov 3, 2026

• bug: unsafe blocks in openshell-sandbox lack // SAFETY: comments and nothing enforces them

  state:triage-needed
  NVIDIA/OpenShell#5188 · Filter by author EmilienM opened on Nov 3, 2026

• bug: sigset_t is only partly initialized under musl before assume_init

  state:triage-needed
  NVIDIA/OpenShell#5187 · Filter by author EmilienM opened on Nov 3, 2026

• bug: managed_children and the workload launcher mishandle a poisoned lock, a missing CONFIG_PROC_CHILDREN and a panicking job

  state:triage-needed
  NVIDIA/OpenShell#5186 · Filter by author EmilienM opened on Nov 3, 2026
  2

• bug: some calls fail or are interrupted inside the sandbox but work natively (rt_sigqueueinfo, self-directed kill, sched_setaffinity, prlimit64, nice)

  state:triage-needed
  NVIDIA/OpenShell#5185 · Filter by author EmilienM opened on Nov 3, 2026

• bug: exec pipes and PTY masters read through the shared blocking pool, and the disconnect path scans /proc on a runtime worker

  state:triage-needed
  NVIDIA/OpenShell#5184 · Filter by author EmilienM opened on Nov 3, 2026

• bug: a transient accept error ends the boundary control listener or the DNS TCP relay

  state:triage-needed
  NVIDIA/OpenShell#5183 · Filter by author EmilienM opened on Nov 3, 2026

• bug: unbounded per-connect procfs work in binary identity resolution

  state:triage-needed
  NVIDIA/OpenShell#5182 · Filter by author EmilienM opened on Nov 3, 2026

• bug: every mediated open/openat shares one broker thread with connect-time identity work

  state:triage-needed
  NVIDIA/OpenShell#5181 · Filter by author EmilienM opened on Nov 3, 2026

• bug: workload pre_exec hooks compile the seccomp filter and log after fork

  state:triage-needed
  NVIDIA/OpenShell#5180 · Filter by author EmilienM opened on Nov 3, 2026

• bug: isolation core robustness and unsafe-hygiene follow-ups

  state:accepted
  NVIDIA/OpenShell#5179 · Filter by author EmilienM opened on Nov 3, 2026
  2

• feat(ocsf): adopt OCSF 1.9.0 attestation and record_integrity for signed, chained events

  NVIDIA/OpenShell#5177 · Filter by author krishicks opened on Nov 2, 2026

• Let the VM driver run a configurable launcher executable

  state:triage-needed
  NVIDIA/OpenShell#5176 · Filter by author mr-miles opened on Nov 2, 2026

• chore(gateway)!: remove the deprecated Podman CA bundle alias in 0.2.0

  NVIDIA/OpenShell#5172 · Filter by author TaylorMutch opened on Nov 2, 2026 · OpenShell 0.2.0

• feat(supervisor): split the boundary wait out of supervisor.boundary.discover_policy with a boundary.connect span

  state:triage-needed
  NVIDIA/OpenShell#5160 · Filter by author rhuss opened on Nov 2, 2026

• ci: publish stable Python wheels directly to PyPI

  NVIDIA/OpenShell#5156 · Filter by author pimlock opened on Nov 2, 2026

• chore: migrate area and topic labels to the new taxonomy

  NVIDIA/OpenShell#5151 · Filter by author purp opened on Nov 2, 2026
  1

• feat(vm): list and prune the VM driver's prepared-image cache

  state:triage-needed
  NVIDIA/OpenShell#5150 · Filter by author vineethsai7 opened on Nov 2, 2026

• bug(vm): a MicroVM sandbox stopped with a full overlay disk cannot start again or be read

  state:triage-needed
  NVIDIA/OpenShell#5149 · Filter by author vineethsai7 opened on Nov 2, 2026

• feat(sandbox): allow job-control signals to the caller's own process group

  state:triage-needed
  NVIDIA/OpenShell#5148 · Filter by author vineethsai7 opened on Nov 2, 2026

• packaging(rpm): ship openshell-driver-vm in the RPM packages

  state:triage-needed
  NVIDIA/OpenShell#5146 · Filter by author vineethsai7 opened on Nov 2, 2026

• bug(proxy): HTTP/1.1 close-delimited response bodies are discarded without Connection: close

  state:triage-needed
  NVIDIA/OpenShell#5145 · Filter by author dimichgh opened on Nov 2, 2026