clem adds allowed-traffic monitoring to NVIDIA OpenShell
clem’s first contribution to NVIDIA OpenShell monitors agent traffic that is already permitted, using per-sandbox network budgets, drift checks, and a fleet view that can flag coordinated writes.