OpenShell announced updates in its 0.1.x line, including a stable release cadence, new isolation primitives, an expanded extension surface, and new APIs. The project says its runtime runs each AI agent in an isolated sandbox, enforces policies on file, system-call, and network access, and limits credentials to approved endpoints. OpenShell also says formal verification flags risky access granted by proposed policy changes before approval.