Breaking

OpenClaw Enterprise opens as a free agent control plane, with NVIDIA OpenShell not yet a production path

September 29, 2026 at 20:23 EDT

AI Agents
Open Source
Security

The OpenClaw Foundation has open-sourced OpenClaw Enterprise, a vendor-neutral control plane for persistent AI agents that organizations run on their own infrastructure, and NVIDIA is offering OpenShell as an open-source option for governing those agents. The software is free under the MIT license and intended for internal pilots. Project documentation says the bundled OpenShell integration is still a work in progress and is not supported for production.

September 29, 2026 · OpenClaw Foundation

A free agent control plane, with a sandbox that is not production-ready

OpenClaw Enterprise is an open-source, self-hosted control plane for persistent agents. NVIDIA OpenShell 0.1.0 is the bundled governance option, and that integration is not supported for production.

0.1.0

OpenShell release bundled with the control plane

1.0

Stable OpenClaw Enterprise release planned later this year

MIT

License. Free for any organization to self-host

~30s

One OpenAI staff account of an internal triage reply

What teams can use now

A free, MIT-licensed control plane for multi-tenant agent deployment, audit, and swappable harnesses. Red Hat and OpenAI are piloting it on infrastructure they run.

What is not ready

Stock OpenShell 0.1.0 cannot take the projected identity or app-server token. The driver rejects the deploy. This is not a supported production path.

How a governed agent is supposed to run

1 · Operator

Sets policy and selects the sandbox

→

2 · Control plane

OCC deploys the agent on Kubernetes

→

3 · OpenShell

Sandbox enforces file, process, and network limits

→

4 · Audit

Allow and deny decisions are recorded

Native session workers: minimum vs default

Same unit, retained workers on one Kubernetes agent. Column height is the setting. The ceiling of 1,024 is 128 times the default, so it is stated beside this 1-to-8 scale instead of drawn on it.

Minimum

Default

1,024

Ceiling an operator can set. Not drawn: it is 128 times the default, which would shrink the 1 and the 8 to slivers.

The default is 8 times the minimum. Workers in one agent still share a single sandbox boundary.

The driver fails closed instead of starting a mis-credentialed harness.

OpenShell must be chosen by an operator, only on dedicated Kubernetes harnesses. It does not add per-tool approval, and sessions inside one agent are not isolated from each other.

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.