Issues

• Approving an MCP rule proposal drops its tool and path, so the approved rule allows every tool

  state:triage-needed
  NVIDIA/OpenShell#4679 · Filter by author boriskwemo opened on Oct 17, 2026

• bug(ci): Kubernetes conformance starts before controller reconciliation recovers

  area:clustertopic:testing
  NVIDIA/OpenShell#4675 · Filter by author pimlock opened on Oct 16, 2026

• A policy DNS address stops taking new connections after the trusted resolver's TTL, one second when that TTL is 0

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4674 · Filter by author Kevinbeltran123 opened on Oct 16, 2026

• The prover answers unsupported for any policy that sets allow_encoded_slash

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4672 · Filter by author Kevinbeltran123 opened on Oct 16, 2026

• Inspected REST endpoint: an encoded slash or conflicting framing headers cut the connection instead of returning a structured 403

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4671 · Filter by author Kevinbeltran123 opened on Oct 16, 2026

• feat(services): publish authoritative supervisor ingress URLs and status

  NVIDIA/OpenShell#4670 · Filter by author TaylorMutch opened on Oct 16, 2026
  

• feat(proxy): add an optional discovery-driven sandbox application proxy

  NVIDIA/OpenShell#4669 · Filter by author TaylorMutch opened on Oct 16, 2026
  

• feat(auth): authorize a discovery-only reader across all workspaces

  NVIDIA/OpenShell#4668 · Filter by author TaylorMutch opened on Oct 16, 2026
  

• feat(gateway): publish accepted supervisor service routes for discovery

  NVIDIA/OpenShell#4667 · Filter by author TaylorMutch opened on Oct 16, 2026
  

• feat(supervisor): add an independent sandbox application listener

  NVIDIA/OpenShell#4666 · Filter by author TaylorMutch opened on Oct 16, 2026
  

• vm driver: the image's sandbox account is never read for a prepared image (passwd read at the disk root, not under /image-rootfs)

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4665 · Filter by author cloudlesssmarthome opened on Oct 16, 2026

• The policy prover's solve time depends on the order of a module's rules

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4664 · Filter by author Kevinbeltran123 opened on Oct 16, 2026

• Hostless web egress conflicts with a pinned provider endpoint

  state:triage-needed
  NVIDIA/OpenShell#4662 · Filter by author rsliter opened on Oct 16, 2026

• fix(server): report dangling provider references instead of failing startup

  state:accepted
  NVIDIA/OpenShell#4657 · Filter by author EmilienM opened on Oct 16, 2026

• ci: generate human-readable stable release notes from PRs

  NVIDIA/OpenShell#4653 · Filter by author drew opened on Oct 16, 2026

• feat(sandbox): add sandbox-initiated supervisor connections with legacy compatibility

  NVIDIA/OpenShell#4652 · Filter by author drew opened on Oct 16, 2026

• feat(gateway): separate collector endpoint for relayed agent traces

  state:triage-needed
  NVIDIA/OpenShell#4648 · Filter by author rhuss opened on Oct 16, 2026

• docs(windows): align MXC documentation with the implementation

  NVIDIA/OpenShell#4645 · Filter by author shailendra-nv opened on Oct 16, 2026
  

• ci: review driver-facing executable flags for compatibility

  NVIDIA/OpenShell#4643 · Filter by author drew opened on Oct 16, 2026

• feat(services): use stable hash-based service hostnames to relax name limits

  NVIDIA/OpenShell#4631 · Filter by author TaylorMutch opened on Oct 15, 2026
  

• docs: document cert-manager operator mTLS certificate setup

  state:accepted
  NVIDIA/OpenShell#4630 · Filter by author TaylorMutch opened on Oct 15, 2026
  

• packaging(snap): ship the VM driver in the snap package

  state:triage-needed
  NVIDIA/OpenShell#4625 · Filter by author olivercalder opened on Oct 15, 2026

• feat: update sandbox workload images without replacing persistent storage

  NVIDIA/OpenShell#4623 · Filter by author sjenning opened on Oct 15, 2026

• fix(snap): only enable gateway user service for a single user

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4614 · Filter by author olivercalder opened on Oct 15, 2026

• chore(config): follow-ups to push config delivery

  area:gatewayarea:providersarea:supervisor
  NVIDIA/OpenShell#4613 · Filter by author pimlock opened on Oct 15, 2026