Issues

• chore: investigate alternatives to the labeler checkpoint label

  NVIDIA/OpenShell#5559 · Filter by author purp opened on Nov 14, 2026
  

• chore(windows): refresh dependencies and regenerate signing candidates

  NVIDIA/OpenShell#5557 · Filter by author shailendra-nv opened on Nov 14, 2026

• bug(cli): openshell rule history shows timestamps as "20770d 15:54"

  state:triage-needed
  NVIDIA/OpenShell#5556 · Filter by author RafiB982 opened on Nov 14, 2026

• bug(policy): agent-authored proposal is auto-rejected as "superseded" by the mechanistic denial chunk, so the reviewer loses the agent's rationale and the agent sees "rejected"

  state:triage-needed
  NVIDIA/OpenShell#5555 · Filter by author RafiB982 opened on Nov 14, 2026

• bug(snap): sandbox download to /tmp/... reports success but the file isn't in the host's /tmp

  state:triage-needed
  NVIDIA/OpenShell#5554 · Filter by author RafiB982 opened on Nov 14, 2026

• bug(snap): openshell doctor check reports a Docker error on a working Docker setup

  state:triage-needed
  NVIDIA/OpenShell#5553 · Filter by author RafiB982 opened on Nov 14, 2026

• bug(snap): sandbox upload fails with "failed to run git rev-parse" unless --no-git-ignore is passed

  state:triage-needed
  NVIDIA/OpenShell#5552 · Filter by author RafiB982 opened on Nov 14, 2026

• bug(snap): sandbox ssh-config ProxyCommand uses the revision path and fails with "Unknown gateway"

  state:triage-needed
  NVIDIA/OpenShell#5551 · Filter by author RafiB982 opened on Nov 14, 2026

• fix(review): keep the reviewer roster limited to collaborators

  NVIDIA/OpenShell#5549 · Filter by author purp opened on Nov 14, 2026

• bug(prover): single-segment * in REST paths causes solver timeouts on contained policies

  NVIDIA/OpenShell#5548 · Filter by author zredlined opened on Nov 13, 2026
  1

• feat(kubernetes): operator-set placement for dedicated supervisor pods, and same-node placement with the workload

  state:triage-needed
  NVIDIA/OpenShell#5547 · Filter by author rakeshgohel01 opened on Nov 13, 2026

• bug(network): IPv4-mapped loopback connects (::ffff:127.0.0.1) are policy-evaluated and denied, while native 127.0.0.1 and ::1 bypass policy

  state:triage-needed
  NVIDIA/OpenShell#5546 · Filter by author cfzlp opened on Nov 13, 2026

• Allow a wildcard/prefix in path_template for path-placed credentials (e.g. Telegram Bot API)

  state:triage-needed
  NVIDIA/OpenShell#5544 · Filter by author Qmrane opened on Nov 13, 2026

• Kubernetes driver: let operators add a container to dedicated supervisor pods

  state:triage-needed
  NVIDIA/OpenShell#5543 · Filter by author tfarinacci opened on Nov 13, 2026

• Present the sandbox's SPIFFE X.509-SVID as the TLS client certificate for token_grant and provider endpoints

  state:triage-needed
  NVIDIA/OpenShell#5542 · Filter by author tfarinacci opened on Nov 13, 2026

• Host-enforced filesystem restrictions for shared VM workspaces

  state:triage-needed
  NVIDIA/OpenShell#5541 · Filter by author lattwood opened on Nov 13, 2026

• docs(extensibility): document interceptor-based enforcement of sandbox resource requests

  state:triage-needed
  NVIDIA/OpenShell#5537 · Filter by author jhjaggars opened on Nov 13, 2026
  2

• feat(observability): propagate request ID and trace context to upstream MCP servers

  state:triage-needed
  NVIDIA/OpenShell#5535 · Filter by author yada opened on Nov 13, 2026

• ci(e2e): cut fixed setup and teardown costs of the k3s conformance rows

  area:buildtopic:testing
  NVIDIA/OpenShell#5531 · Filter by author matthewgrossman opened on Nov 13, 2026

• ci(e2e): don't make the Branch E2E deb wait for the VM driver

  area:buildtopic:testing
  NVIDIA/OpenShell#5530 · Filter by author matthewgrossman opened on Nov 13, 2026

• feat(policy): triangulate process, destination, and recent session activity for egress

  state:triage-needed
  NVIDIA/OpenShell#5528 · Filter by author fitzyracing1 opened on Nov 12, 2026

• test(testkit): separate destructive tests from non-destructive ones

  topic:testing
  NVIDIA/OpenShell#5527 · Filter by author matthewgrossman opened on Nov 12, 2026

• bug(supervisor): wait() survives only one boundary transport loss; the second is fatal without a reattach attempt

  state:triage-needed
  Bug

  NVIDIA/OpenShell#5525 · Filter by author mr-miles opened on Nov 12, 2026

• docs: clarify GraphQL operation rules only cover inspected WebSocket text frames

  NVIDIA/OpenShell#5523 · Filter by author fcano opened on Nov 12, 2026

• feat(providers): define shared restrictions for profile environment keys

  state:triage-needed
  NVIDIA/OpenShell#5521 · Filter by author feloy opened on Nov 12, 2026