OpenShell aims to add an open trust layer and hardware-backed controls for AI agents

OpenShell was released in early access in March under the Apache 2.0 license after about a year of development, and its team says it is on pace to donate the project to a foundation. The team’s goal is an open, community-built trust layer for AI agents, which it says are missing safeguards comparable to those used on the web.

The team describes a layered safety approach: formal verification can be applied to OpenShell’s deterministic runtime, with controls potentially extended into hardware to check whether anything leaves a system. It says it can demonstrate full-stack verification and is optimistic about the method, while stressing that verification must be applied at the right layers. A reference design using BlueField VERA is intended to move network controls into hardware for machine-speed, deterministic enforcement; OpenShell’s drivers are designed to support different hardware, and NVIDIA has briefed ARM and Intel. Hardware monitoring of an agent’s reasoning and actions is described as an area of research, not as a proven ability to identify intent.