OpenShell first-session checklist
Documentation reviewed October 13, 2026. This is an original operating checklist, not NVIDIA configuration.

1. Record the CLI, gateway, runtime, workload image, and model versions.
2. Verify openshell status and inspect the effective policy.
3. Run the agent with a provider-backed key, then remove the host environment copy.
4. Upload a sanitized fixture and confirm its files are present.
5. Ask for a cited report with observations separate from hypotheses.
6. Download and review the result before applying it elsewhere.
7. Run the standalone curl lab: denied destination, allowed GET, denied POST.
8. Confirm Loaded policy revision and an OpenShell policy_denied response.
9. Remove the lab rule and verify GET is denied again.
10. Review pending proposals manually; do not assume automatic approval preserves a fixed host list.
11. Export needed output before deleting disposable sandboxes.
12. For shared deployments, verify CNI enforcement and preserve policy logs plus workload output.