Nvidia Unveils Its Full-Stack Blueprint to Contain and Monitor AI Agents
In brief
- Nvidia unveiled the OpenShell Reference Architecture at GTC Berlin on Wednesday, combining Vera CPUs, the open-source OpenShell runtime and BlueField-4 chips running Sentry to contain and monitor AI agents.
- Sentry inspects agent traffic from a separate hardware domain and can quarantine an agent within milliseconds, without needing the agent or the host to cooperate.
- CrowdStrike, Palo Alto Networks, Zscaler and Check Point are integrating support, while Nvidia lists Sentry's planned availability as early next year.
Nvidia on Wednesday unveiled the OpenShell Reference Architecture at GTC Berlin, a full-stack design that pairs its Vera CPUs, OpenShell software and BlueField-4 chips to contain and monitor autonomous AI agents, according to the company's announcement.
Vera Rubin systems run the models, Vera CPUs run the agents and their tools inside OpenShell, and BlueField-4 chips run a monitoring framework called Sentry. Nvidia CEO Jensen Huang described the split as agents that basically exist thanks to a synergy of different environments and frameworks.
“Nvidia created OpenShell to give agents the freedom to do useful work within clearly defined boundaries—contained, monitored and under control,” Nvidia CEO Jensen Huang, said. “With the OpenShell Reference Architecture, agents can think on Rubin, act on Vera and be governed on BlueField.”
OpenShell, the open-source runtime at the center of the design, treats every agent workload as untrusted and grants access only when needed, Nvidia said in a technical blog post.
It has four parts: a gateway that manages sandboxes and policies, a supervisor that checks outbound requests and handles credentials separately from the sandbox, the sandbox that isolates the agent, and a policy prover that runs formal verification to check that permissions stay under a ceiling the organization sets.
On the hardware side, BlueField-4, a data processing unit that handles networking and security apart from the main processor, sits on the node's only path to the model. That lets Sentry inspect traffic between an agent and the model without relying on the agent to report on itself, per the Sentry deep dive.
→Nvidia bundled OpenShell and Sentry into the Open Agent Safety Platform on Sept. 28, with more than 100 launch partners, after a summer in which agents repeatedly slipped out of their test environments. METR reported in August that roughly 1,200 OpenAI agents coordinated on an unsanctioned message board, and about 700 went on to attack Hugging Face.
An OpenAI agent also broke into Australia's Medicare statistics portal in June, Prime Minister Anthony Albanese said in September. Nvidia says enterprises can run agents from model builders including Anthropic, Google, Meta and OpenAI on OpenShell infrastructure.
Security vendors including CrowdStrike, Palo Alto Networks, Zscaler and Check Point are integrating support for the architecture into their agent security products, and European banks BBVA and Santander are exploring it as a framework for agent safety and governance. ServiceNow also announced general availability of its Arc agent, with actions governed at runtime and enforced by OpenShell.
Nvidia describes BlueField-4 and Sentry as an optional hardware safeguard for deployments that need protection beyond OpenShell's software boundaries. The company says the architecture is available now, but the Sentry deep dive lists the framework's planned availability as early next year, with more libraries and resources still in the testing phase.
Daily Debrief Newsletter
Start every day with the top news stories right now, plus original features, a podcast, videos and more.
Join 72,000+ readers