Issues

• Hard-coded 5-minute provisioning/bootstrap deadlines make sandboxes unusable on slow isolation backends (CoCo/peer-pods)

  state:triage-needed
  NVIDIA/OpenShell#4364 · Filter by author eformat opened on Oct 9, 2026

• bug(driver-vm): starting a process, a first file read and a first memory touch are 2-3x slower than in a plain microVM

  state:triage-needed
  NVIDIA/OpenShell#4363 · Filter by author balajinvda opened on Oct 9, 2026

• feat(driver-vm): let operators set how soon a supervisor sees a policy change

  state:triage-needed
  NVIDIA/OpenShell#4361 · Filter by author balajinvda opened on Oct 9, 2026

• Credential Issuer Interface

  roadmap
  NVIDIA/OpenShell#4358 · Filter by author johntmyers opened on Oct 9, 2026

• Allow use of GitHub App access tokens

  state:triage-needed
  NVIDIA/OpenShell#4356 · Filter by author deeno35 opened on Oct 8, 2026

• bug(agents): OpenCode principal-engineer-reviewer is out of date with the Claude copy

  NVIDIA/OpenShell#4354 · Filter by author matthewgrossman opened on Oct 8, 2026

• feat(isolation): cut over the built-in sandbox to the delegated wire contract

  NVIDIA/OpenShell#4353 · Filter by author drew opened on Oct 8, 2026

• feat(supervisor): hold reconnect while a sandbox is suspended by its backend

  state:triage-needed
  NVIDIA/OpenShell#4352 · Filter by author mayawang opened on Oct 8, 2026

• feat: Firecracker compute driver — reuse the VM guest model with jailer, OCI images and full sandbox lifecycle

  state:triage-needed
  NVIDIA/OpenShell#4351 · Filter by author thukabjj opened on Oct 8, 2026

• feat: add operator-only provider credential retrieval over mTLS

  area:gatewaystate:accepted
  Enhancement

  NVIDIA/OpenShell#4350 · Filter by author sjenning opened on Oct 8, 2026

• feat: add operator-only provider credential retrieval over mTLS

  area:gateway
  NVIDIA/OpenShell#4349 · Filter by author sjenning opened on Oct 8, 2026

• test(oci): move OCI image USER/WORKDIR checks into a shared tmachine feature suite

  area:buildstate:pr-openedtopic:testing
  NVIDIA/OpenShell#4346 · Filter by author matthewgrossman opened on Oct 8, 2026

• bug(kubernetes): existing sandbox bootstrap images remain stale after gateway upgrade

  NVIDIA/OpenShell#4341 · Filter by author purp opened on Oct 8, 2026

• ci: check issue acceptance for community pull requests

  NVIDIA/OpenShell#4339 · Filter by author elezar opened on Oct 8, 2026

• bug: Gator routes unmerged PR security regressions into private triage

  NVIDIA/OpenShell#4337 · Filter by author johntmyers opened on Oct 8, 2026

• fix(release): qualify manually pushed prerelease tags

  NVIDIA/OpenShell#4334 · Filter by author SDAChess opened on Oct 8, 2026

• feat: define annotation namespaces and gateway-enforced ownership

  NVIDIA/OpenShell#4333 · Filter by author elezar opened on Oct 8, 2026

• feat(sdk/ts): SandboxRef omits the sandbox creation time

  state:accepted
  NVIDIA/OpenShell#4332 · Filter by author fbricon opened on Oct 8, 2026

• Closed TCP listening socket stays in LISTEN inside the sandbox until another bind on the same port

  state:triage-needed
  NVIDIA/OpenShell#4331 · Filter by author AnshDevelops opened on Oct 8, 2026

• feat: design and implement administrator-controlled CDI device admission

  NVIDIA/OpenShell#4327 · Filter by author elezar opened on Oct 8, 2026

• bug: VM config preflight fails when e2fsprogs is transiently busy

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4314 · Filter by author grs opened on Oct 7, 2026

• feat(providers): support CLI label creation, inspection, and filtering

  area:cliarea:providers
  NVIDIA/OpenShell#4312 · Filter by author johntmyers opened on Oct 7, 2026

• Multi-sandbox and HA Supervisors

  roadmap
  NVIDIA/OpenShell#4311 · Filter by author johntmyers opened on Oct 7, 2026

• Sandbox Service Exposure

  roadmap
  NVIDIA/OpenShell#4310 · Filter by author johntmyers opened on Oct 7, 2026

• feat(server): follow-ups to scoped mutation locks (#4147)

  state:triage-needed
  NVIDIA/OpenShell#4307 · Filter by author EmilienM opened on Oct 7, 2026