--- description: VAST Agent Sandbox Foundation Stack runs NVIDIA NemoClaw agents in OpenShell sandboxes on zero-copy clones and logs every tool call. title: VAST Agent Sandbox Foundation Stack Puts NVIDIA OpenShell Sandboxes on Zero-Copy Clones and Logs Every Tool Call image: https://www.storagereview.com/wp-content/uploads/2026/10/Storagereview-vast-management-system-lab-guide-3.png --- [![Storage Review]()](https://storagereview.com/) --- [Facebook](https://www.facebook.com/@storagereview) [X (Twitter)](https://twitter.twitter.com/storagereview) [Instagram](https://www.instagram.com/storagereview/) [LinkedIn](https://www.linkedin.com/company/storagereview-com) [YouTube](https://www.youtube.com/user/storagereview?sub_confirmation=1) [Email](mailto:info@storagereview.com) [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0) [Reddit](https://www.reddit.com/r/StorageReview/) [Discord](https://discord.gg/TwMHb4azdC) [RSS Feed](https://www.storagereview.com/rss.xml) [TikTok](https://www.tiktok.com/@storagereview) [Facebook](https://www.facebook.com/@storagereview) [X (Twitter)](https://twitter.com/storagereview) [Instagram](https://www.instagram.com/storagereview/) [LinkedIn](https://www.linkedin.com/company/storagereview-com) [YouTube](https://www.youtube.com/user/storagereview?sub_confirmation=1) [Email](mailto:info@storagereview.com) [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0) [Reddit](https://www.reddit.com/r/StorageReview/) [Discord](https://discord.gg/TwMHb4azdC) [RSS Feed](https://www.storagereview.com/rss.xml) [TikTok](https://www.tiktok.com/@storagereview) [![StorageReview.com](https://www.storagereview.com/wp-content/uploads/2026/07/Storage-Review-2x.png)](https://www.storagereview.com) ≡ Menu - [Home](https://www.storagereview.com/) - [Storage Reviews](https://www.storagereview.com/review) - [End User Reviews](https://www.storagereview.com/consumer) - [Enterprise Reviews](https://www.storagereview.com/enterprise) - [Ubiquiti Reviews](https://www.storagereview.com/best/ubiquiti-reviews) - [SR Merch](https://store.storagereview.com) - [Leaderboards](https://www.storagereview.com/best) - [Best Storage Arrays](https://www.storagereview.com/best/storage-arrays) - [Best Enterprise SSDs](https://www.storagereview.com/best/enterprise-ssds) - [Best Servers](https://www.storagereview.com/best/servers) - [Best Enterprise GPUs](https://www.storagereview.com/best/enterprise-gpus) - [Best Desktops for Local AI](https://www.storagereview.com/best/desktops-local-ai) - [Best Laptops for Local AI](https://www.storagereview.com/best/laptops-local-ai) - [Best Local LLM Tools](https://www.storagereview.com/best/local-llm-tools) - [Agentic AI Hardware](https://www.storagereview.com/best/agentic-ai-hardware) - [Best SSDs & Hard Drives](https://www.storagereview.com/best_drives) - [Best Portable SSDs](https://www.storagereview.com/best/portable-ssds) - [Best Business Laptops](https://www.storagereview.com/best/business-laptops) - [Best Mobile Workstations](https://www.storagereview.com/best/mobile-workstations) - [Best Desktop Workstations](https://www.storagereview.com/best/desktop-workstations) - [Best Mini PCs](https://www.storagereview.com/best/mini-pcs) - [Best Laptop Battery Life](https://www.storagereview.com/best/laptop-battery-life) - [Storage Reference Guide](https://www.storagereview.com/storage-reference-guide) - [About SR](https://www.storagereview.com/about-storagereview) - [StorageReview.com Sweepstakes Rules and Regulations](https://www.storagereview.com/storagereview-com-sweepstakes-rules-and-regulations) Search [Home](https://www.storagereview.com/) » [News](https://www.storagereview.com/news) » VAST Agent Sandbox Foundation Stack Puts NVIDIA OpenShell Sandboxes on Zero-Copy Clones and Logs Every Tool Call # VAST Agent Sandbox Foundation Stack Puts NVIDIA OpenShell Sandboxes on Zero-Copy Clones and Logs Every Tool Call by Harold Fritts on October 22, 2026 [AI](https://www.storagereview.com/enterprise/ai)  ◇  [Enterprise](https://www.storagereview.com/enterprise) VAST Data announced the Agent Sandbox Foundation Stack with NVIDIA at NVIDIA GTC Berlin, a reference architecture that runs NVIDIA NemoClaw agents inside NVIDIA OpenShell sandboxes on the VAST AI Operating System. OpenShell handles isolated execution and policy enforcement around each agent, and VAST handles the parts that have to outlive the sandbox: the agent’s workspace, its memory and context, and a record of every action it took. VAST says the design is meant to run thousands of agents and sub-agents in production without tying their state to whichever compute node happens to be running them. ![VAST Management System dashboard on a StorageReview lab cluster showing capacity, bandwidth, IOPS, and latency, the telemetry layer of the VAST Agent Sandbox Foundation Stack](https://www.storagereview.com/wp-content/uploads/2026/10/Storagereview-vast-management-system-lab-guide-3.jpg) ## Zero-Copy Workspaces Separate Storage from Agent Execution VAST is addressing the churn that agent fleets create: thousands of isolated workspaces built and torn down in an hour, and long-running agents that sleep, resume, and hand work to short-lived sub-agents along the way. The stack decouples each agent’s persistent state from any one compute node, so an agent can pause, resume, or move to other eligible infrastructure without losing its progress or working data, and the compute can stay ephemeral while the state stays durable. When a new agent task starts, the VAST DataStore Block CSI driver provisions a persistent volume for the OpenShell sandbox from a zero-copy clone, which VAST says takes seconds and avoids a full copy of the underlying data. In the reference implementation VAST published on [GitHub](https://github.com/vast-data/vast-sandboxes) under an Apache 2.0 license, each workflow gets a head persistent volume claim, and each sub-agent gets a clone of it; volume snapshots cover suspend and resume, and a sleeping sandbox keeps its volume. VAST DataBase serves as the shared vector store and knowledge base, which VAST says lets hundreds of reasoning agents query the same dataset concurrently without a copy per agent. In the GitHub implementation, it also holds per-department agent memory, the trace spans and turns, and the finished reports, and a Model Context Protocol server is the only path from a sandbox to the database. NemoClaw supplies the agent layer and supports Hermes, LangChain, OpenClaw, or a custom harness. “Every enterprise that puts an agent into production will eventually need to answer what it did and why it did it,” said Alon Horev, CTO and Co-Founder at VAST Data. “An agent might exist for minutes, spawn thousands of other agents and then disappear, but its work has to persist and its actions have to stay understandable long afterward.” ## Persistent Records Track Activity Beyond Sandbox Lifetimes OpenShell applies identity-based access and behavior policies and logs every interaction between an agent and anything outside its sandbox. VAST DataBase keeps the durable copy of that record, logging every tool call, prompt, token, cost, and decision so the audit trail survives after the agent and its sandbox are gone. The VAST Management System adds real-time telemetry on data flows across the fleet, and VAST says that telemetry interoperates with [NVIDIA Sentry](https://www.storagereview.com/news/nvidia-open-agent-safety-platform-openshell-sentry-bluefield-4), the BlueField-4 DPU layer that monitors traffic between agents on Vera CPUs and models on Rubin GPUs. When Sentry flags or quarantines a misbehaving agent, VAST says the AI OS isolates that agent’s data access and freezes the sandbox state for forensic review. “As AI agents take on more complex work, enterprises need infrastructure that can support secure execution while preserving the data, context and state agents depend on across their lifecycle,” said Kari Briski, Vice President of Generative AI Software at NVIDIA. Foundation Stacks are VAST’s packaging of NVIDIA AI Blueprints into repeatable deployments on the AI OS. The first two covered an enterprise research assistant on VAST DataEngine with NVIDIA Nemotron and video intelligence on NVIDIA Cosmos reasoning models with NVIDIA Video Search and Summarization; this one covers the agent runtime itself. It also builds on [VAST DataEnclave](https://www.storagereview.com/news/vast-dataenclave-runs-ai-models-on-regulated-data-inside-nvidia-confidential-computing-ships-q1-2027), the confidential computing runtime VAST previewed in September, and on the [OpenShell reference architecture](https://www.storagereview.com/news/nvidia-gtc-berlin-2026-dsx-pod-14-day-ai-factory-substrate-openshell-ai-ran) NVIDIA detailed at the same show. VAST is demonstrating the stack at GTC Berlin with a governed multi-agent workflow in which agents spawn, pull from persistent data services, and keep their state as the compute underneath them changes. The GitHub implementation runs that pattern as a supervised research job: a lead agent plans the work on an NVIDIA NIM model, a human can approve or edit the plan, and sub-agents run in parallel inside OpenShell sandboxes against an earnings-call corpus in VAST DataBase. VAST has not published a general availability date, required software versions, or hardware configurations for the stack, and the thousands-of-agents figure is a design target with no measured provisioning rate or concurrency result behind it. ### [VAST AI Operating System](https://www.vastdata.com/platform/ai-os) **Engage with StorageReview** [Newsletter](https://www.storagereview.com/storage_newsletter) |  [YouTube](https://www.youtube.com/user/StorageReview "Opens in a new window") | Podcast  [iTunes](https://podcasts.apple.com/gb/podcast/storagereview-com-storage-reviews/id1060681115 "Opens in a new window")/ [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0 "Opens in a new window") |  [Instagram](https://www.instagram.com/storagereview/ "Opens in a new window") |  [Twitter](https://twitter.com/storagereview "Opens in a new window") |  [TikTok](https://www.tiktok.com/@storagereview? "Opens in a new window") |  [RSS Feed](https://www.storagereview.com/rss.xml) ![]() ### Harold Fritts I have been in the tech industry since IBM created Selectric. My background, though, is writing. So I decided to get out of the pre-sales biz and return to my roots, doing a bit of writing but still being involved in technology. Previous post: [NVIDIA GTC Berlin: 14-Day DSX POD AI Factories, a 2.5x Substrate Buildout, and the OpenShell Reference Architecture](https://www.storagereview.com/news/nvidia-gtc-berlin-2026-dsx-pod-14-day-ai-factory-substrate-openshell-ai-ran) Next post: [Supermicro NVIDIA Vera CPU Rack: 256 Vera CPUs, 400TB of LPDDR5X, and 22,500 Agent Sandboxes in a 208kW Liquid-Cooled 48U](https://www.storagereview.com/news/supermicro-nvidia-vera-cpu-rack-256-cpus-400tb-22500-agent-sandboxes-208kw) Trusted Vendors Products and solutions from our affiliate partners: - [ ![Ubiquiti Logo](https://www.storagereview.com/wp-content/uploads/2024/11/2-1.webp) Ubiquiti ](https://store.ui.com/us/en?a_aid=StorageReview "Opens in a new window") - [ ![Newegg Logo](https://www.storagereview.com/wp-content/uploads/2025/11/newegg.webp) Newegg ](https://click.linksynergy.com/fs-bin/click?id=g5terNMDhz0&offerid=1207190.18&subid=0&type=4 "Opens in a new window") - [ ![Amazon Logo](https://www.storagereview.com/wp-content/uploads/2025/11/amazon.webp) Amazon ](https://amzn.to/4fLJUEW "Opens in a new window") Newsletter Subscribe to the StorageReview newsletter to stay up to date on the latest news and reviews. We promise no spam! 1 Leave this field empty if you’re human: ## Advertisement Content Categories [Facebook](https://www.facebook.com/@storagereview) [X](https://twitter.com/storagereview) [Instagram](https://www.instagram.com/storagereview/) [LinkedIn](https://www.linkedin.com/company/storagereview-com) [YouTube](https://www.youtube.com/user/storagereview?sub_confirmation=1) [Email](mailto:info@storagereview.com) [Spotify](https://open.spotify.com/show/1y6VnznABhHeOSMOmbDTz0) [Reddit](https://www.reddit.com/r/StorageReview/) [Discord](https://discord.gg/TwMHb4azdC) [RSS](https://www.storagereview.com/rss.xml) [TikTok](https://www.tiktok.com/@storagereview) Copyright © 1998-2025 Flying Pig Ventures, LLC Cincinnati, Ohio. All rights reserved. Manage your privacy To provide the best experiences, we and our partners use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us and our partners to process personal data such as browsing behavior or unique IDs on this site and show (non-) personalized ads. Not consenting or withdrawing consent, may adversely affect certain features and functions. Click below to consent to the above or make granular choices. Your choices will be applied to this site only. You can change your settings at any time, including withdrawing your consent, by using the toggles on the Cookie Policy, or by clicking on the manage consent button at the bottom of the screen. Functional Functional Always active The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network. Preferences Preferences The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user. Statistics Statistics The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you. Marketing Marketing The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes. Statistics Marketing Features Always active Special features Special purposes Always active - Manage options - Manage services - Manage {vendor\_count} vendors - [Read more about these purposes](https://cookiedatabase.org/tcf/purposes/) Accept Deny Manage options Save preferences Manage options - {title} - {title} - {title} Manage your privacy To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions. Functional Functional Always active The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network. Preferences Preferences The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user. Statistics Statistics The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you. Marketing Marketing The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes. Statistics Marketing Features Always active Special features Special purposes Always active - Manage options - Manage services - Manage {vendor\_count} vendors - [Read more about these purposes](https://cookiedatabase.org/tcf/purposes/) Accept Deny Manage options Save preferences Manage options - {title} - {title} - {title} Manage consent Manage consent ```json {"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.storagereview.com\/news\/vast-agent-sandbox-foundation-stack-nvidia-openshell-nemoclaw-zero-copy-clones","url":"https:\/\/www.storagereview.com\/news\/vast-agent-sandbox-foundation-stack-nvidia-openshell-nemoclaw-zero-copy-clones","name":"VAST Agent Sandbox Foundation Stack Puts NVIDIA OpenShell Sandboxes on Zero-Copy Clones and Logs Every Tool Call - StorageReview.com","isPartOf":{"@id":"https:\/\/www.storagereview.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.storagereview.com\/news\/vast-agent-sandbox-foundation-stack-nvidia-openshell-nemoclaw-zero-copy-clones#primaryimage"},"image":{"@id":"https:\/\/www.storagereview.com\/news\/vast-agent-sandbox-foundation-stack-nvidia-openshell-nemoclaw-zero-copy-clones#primaryimage"},"thumbnailUrl":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2026\/10\/Storagereview-vast-management-system-lab-guide-3.png","datePublished":"2026-10-22T14:16:10+00:00","description":"VAST Agent Sandbox Foundation Stack runs NVIDIA NemoClaw agents in OpenShell sandboxes on zero-copy clones and logs every tool call.","breadcrumb":{"@id":"https:\/\/www.storagereview.com\/news\/vast-agent-sandbox-foundation-stack-nvidia-openshell-nemoclaw-zero-copy-clones#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.storagereview.com\/news\/vast-agent-sandbox-foundation-stack-nvidia-openshell-nemoclaw-zero-copy-clones"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.storagereview.com\/news\/vast-agent-sandbox-foundation-stack-nvidia-openshell-nemoclaw-zero-copy-clones#primaryimage","url":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2026\/10\/Storagereview-vast-management-system-lab-guide-3.png","contentUrl":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2026\/10\/Storagereview-vast-management-system-lab-guide-3.png","width":1600,"height":819,"caption":"VAST Management System dashboard on a StorageReview lab cluster showing capacity, bandwidth, IOPS, and latency, the telemetry layer of the VAST Agent Sandbox Foundation Stack"},{"@type":"BreadcrumbList","@id":"https:\/\/www.storagereview.com\/news\/vast-agent-sandbox-foundation-stack-nvidia-openshell-nemoclaw-zero-copy-clones#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.storagereview.com\/"},{"@type":"ListItem","position":2,"name":"News","item":"https:\/\/www.storagereview.com\/news"},{"@type":"ListItem","position":3,"name":"VAST Agent Sandbox Foundation Stack Puts NVIDIA OpenShell Sandboxes on Zero-Copy Clones and Logs Every Tool Call"}]},{"@type":"WebSite","@id":"https:\/\/www.storagereview.com\/#website","url":"https:\/\/www.storagereview.com\/","name":"StorageReview.com","description":"StorageReview.com is a leading provider of news and reviews throughout the entire IT stack - from the datacenter to the edge, and all points in between.","publisher":{"@id":"https:\/\/www.storagereview.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.storagereview.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.storagereview.com\/#organization","name":"StorageReview.com","url":"https:\/\/www.storagereview.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.storagereview.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2020\/02\/Storage-Reviews-2-2.png","contentUrl":"https:\/\/www.storagereview.com\/wp-content\/uploads\/2020\/02\/Storage-Reviews-2-2.png","width":344,"height":61,"caption":"StorageReview.com"},"image":{"@id":"https:\/\/www.storagereview.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/storagereview","http:\/\/youtube.com\/user\/storagereview"]}]} ```