Issues

• test(oci): move OCI image USER/WORKDIR checks into a shared tmachine feature suite

  area:buildstate:pr-openedtopic:testing
  NVIDIA/OpenShell#4346 · Filter by author matthewgrossman opened on Oct 8, 2026

• bug(kubernetes): existing sandbox bootstrap images remain stale after gateway upgrade

  NVIDIA/OpenShell#4341 · Filter by author purp opened on Oct 8, 2026

• ci: check issue acceptance for community pull requests

  NVIDIA/OpenShell#4339 · Filter by author elezar opened on Oct 8, 2026

• bug: Gator routes unmerged PR security regressions into private triage

  NVIDIA/OpenShell#4337 · Filter by author johntmyers opened on Oct 8, 2026

• fix(release): qualify manually pushed prerelease tags

  NVIDIA/OpenShell#4334 · Filter by author SDAChess opened on Oct 8, 2026

• feat: define annotation namespaces and gateway-enforced ownership

  NVIDIA/OpenShell#4333 · Filter by author elezar opened on Oct 8, 2026

• feat(sdk/ts): SandboxRef omits the sandbox creation time

  state:triage-needed
  NVIDIA/OpenShell#4332 · Filter by author fbricon opened on Oct 8, 2026

• Closed TCP listening socket stays in LISTEN inside the sandbox until another bind on the same port

  state:triage-needed
  NVIDIA/OpenShell#4331 · Filter by author AnshDevelops opened on Oct 8, 2026

• feat: design and implement administrator-controlled CDI device admission

  NVIDIA/OpenShell#4327 · Filter by author elezar opened on Oct 8, 2026

• dev.84: exec boundary permanently fails after policy denials while sandbox remains Ready

  arch:amd64area:sandboxarea:supervisoros:linuxspikestate:validatedtopic:networking
  NVIDIA/OpenShell#4319 · Filter by author cjagwani opened on Oct 7, 2026
  1

• bug: VM config preflight fails when e2fsprogs is transiently busy

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4314 · Filter by author grs opened on Oct 7, 2026

• feat(providers): support CLI label creation, inspection, and filtering

  area:cliarea:providers
  NVIDIA/OpenShell#4312 · Filter by author johntmyers opened on Oct 7, 2026

• Multi-sandbox and HA Supervisors

  roadmap
  NVIDIA/OpenShell#4311 · Filter by author johntmyers opened on Oct 7, 2026

• Sandbox Service Exposure

  roadmap
  NVIDIA/OpenShell#4310 · Filter by author johntmyers opened on Oct 7, 2026

• feat(server): follow-ups to scoped mutation locks (#4147)

  state:triage-needed
  NVIDIA/OpenShell#4307 · Filter by author EmilienM opened on Oct 7, 2026

• feat(cli): allow annotations when creating a sandbox

  state:accepted
  NVIDIA/OpenShell#4303 · Filter by author Tojaj opened on Oct 7, 2026

• bug(cli): --upload cannot be used together with a sandbox command, so a command-driven sandbox has no large-input channel

  state:triage-needed
  NVIDIA/OpenShell#4301 · Filter by author anthonychung opened on Oct 7, 2026

• feat(chart): a value to mount the default sandbox policy from a ConfigMap

  state:triage-needed
  NVIDIA/OpenShell#4300 · Filter by author anthonychung opened on Oct 7, 2026

• bug(k8s): policy set --global breaks sandbox start on the Kubernetes driver (supervisor policy push refused: policy is managed globally)

  state:triage-needed
  NVIDIA/OpenShell#4299 · Filter by author anthonychung opened on Oct 7, 2026

• feat(provider): ship a Bearer-token model-provider profile and document header substitution

  state:triage-needed
  NVIDIA/OpenShell#4298 · Filter by author anthonychung opened on Oct 7, 2026

• docs: document sandbox and OCSF log retention, rotation and on-disk location per driver

  state:triage-needed
  NVIDIA/OpenShell#4297 · Filter by author anthonychung opened on Oct 7, 2026

• docs(landlock): state the minimum kernel and Landlock ABI per feature, and name it in the hard_requirement startup error

  state:triage-needed
  NVIDIA/OpenShell#4296 · Filter by author anthonychung opened on Oct 7, 2026

• bug(cli): --no-keep discards the sandbox audit logs; OCSF lines also flush 1-2 s after exit

  state:triage-needed
  NVIDIA/OpenShell#4295 · Filter by author anthonychung opened on Oct 7, 2026

• feat(supervisor): a missing MCP-Protocol-Version header is refused identically to a policy deny

  state:triage-needed
  NVIDIA/OpenShell#4294 · Filter by author anthonychung opened on Oct 7, 2026
  1

• feat(policy): an MCP access preset, or a validator message that says what to write when access presets are rejected on protocol: mcp

  state:triage-needed
  NVIDIA/OpenShell#4293 · Filter by author anthonychung opened on Oct 7, 2026
  2