Issues

• bug(docker): recovery stop aborts when supervisor-failure watch restores Error

  state:triage-needed
  NVIDIA/OpenShell#4727 · Filter by author TyceHerrman opened on Oct 19, 2026

• test(tmachine): move tmachine support files under tests/tmachine

  NVIDIA/OpenShell#4725 · Filter by author matthewgrossman opened on Oct 19, 2026

• feat(server): make Kubernetes, AWS STS, and Vault integrations optional

  state:triage-needed
  NVIDIA/OpenShell#4723 · Filter by author TyceHerrman opened on Oct 19, 2026

• feat(auth): authenticate gateway-routed sandbox service requests

  NVIDIA/OpenShell#4722 · Filter by author TaylorMutch opened on Oct 19, 2026
  

• bug(podman): watch initialization hangs with more than 256 existing sandbox snapshots

  state:triage-needed
  NVIDIA/OpenShell#4717 · Filter by author AdityaProMax opened on Oct 19, 2026

• bug(sandbox): reconnect, credential renewal and liveness accept a backend Confirm without checking the launch binding

  Bug

  NVIDIA/OpenShell#4703 · Filter by author shiju-nv opened on Oct 19, 2026

• feat: serve Kubernetes sandbox sessions from the experimental shared supervisor

  NVIDIA/OpenShell#4700 · Filter by author drew opened on Oct 18, 2026

• refactor: isolate supervisor state per sandbox session

  NVIDIA/OpenShell#4699 · Filter by author drew opened on Oct 18, 2026

• feat: bootstrap experimental gateway supervisor deployment

  NVIDIA/OpenShell#4694 · Filter by author drew opened on Oct 18, 2026

• feat: bootstrap opt-in shared supervisors on Kubernetes

  NVIDIA/OpenShell#4690 · Filter by author drew opened on Oct 18, 2026

• feat(server): export supervisor session placement metrics

  state:triage-needed
  NVIDIA/OpenShell#4688 · Filter by author EmilienM opened on Oct 18, 2026

• test(server): keep relays queued during supervisor session setup behind SessionAccepted

  state:triage-needed
  NVIDIA/OpenShell#4687 · Filter by author EmilienM opened on Oct 18, 2026

• fix(server): scope the SSH identity lock per sandbox and bound data-pool lock holders

  state:accepted
  NVIDIA/OpenShell#4686 · Filter by author EmilienM opened on Oct 18, 2026

• bug(test): Python E2E cleanup deadline is shorter than Kubernetes sandbox termination

  state:triage-needed
  NVIDIA/OpenShell#4685 · Filter by author gmenher opened on Oct 18, 2026

• OpenShell 0.1.4 — Docker sandbox supervisor fails to fetch startup configuration on macOS

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4683 · Filter by author Imperium-Consulting opened on Oct 17, 2026

• VM driver: trust a CA bundle for its image registry (for a local registry with a self-signed CA)

  state:triage-needed
  NVIDIA/OpenShell#4681 · Filter by author cloudlesssmarthome opened on Oct 17, 2026

• Approving an MCP rule proposal drops its tool and path, so the approved rule allows every tool

  state:triage-needed
  NVIDIA/OpenShell#4679 · Filter by author boriskwemo opened on Oct 17, 2026

• bug(ci): Kubernetes conformance starts before controller reconciliation recovers

  area:clustertopic:testing
  NVIDIA/OpenShell#4675 · Filter by author pimlock opened on Oct 16, 2026

• A policy DNS address stops taking new connections after the trusted resolver's TTL, one second when that TTL is 0

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4674 · Filter by author Kevinbeltran123 opened on Oct 16, 2026

• The prover answers unsupported for any policy that sets allow_encoded_slash

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4672 · Filter by author Kevinbeltran123 opened on Oct 16, 2026

• Inspected REST endpoint: an encoded slash or conflicting framing headers cut the connection instead of returning a structured 403

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4671 · Filter by author Kevinbeltran123 opened on Oct 16, 2026

• feat(services): publish authoritative supervisor ingress URLs and status

  NVIDIA/OpenShell#4670 · Filter by author TaylorMutch opened on Oct 16, 2026
  

• feat(proxy): add an optional discovery-driven sandbox application proxy

  NVIDIA/OpenShell#4669 · Filter by author TaylorMutch opened on Oct 16, 2026
  

• feat(auth): authorize a discovery-only reader across all workspaces

  NVIDIA/OpenShell#4668 · Filter by author TaylorMutch opened on Oct 16, 2026
  

• feat(gateway): publish accepted supervisor service routes for discovery

  NVIDIA/OpenShell#4667 · Filter by author TaylorMutch opened on Oct 16, 2026