OpenShell — NVIDIA's "safe, private runtime for fleets of autonomous AI agents" — hit the Hacker News front page today (257 points; the repo is at 17,719 stars, v0.1.5 shipped October 20). Most agent sandboxes sell you enforcement: Landlock, seccomp, a network proxy. OpenShell sells those too, but its headline differentiator is the second half: formal verification . Before a policy change is applied, an SMT-based prover checks what the change would allow. That prover ships as a standalone CL...