NVIDIA Open Agent Safety Platform: OpenShell + Sentry
Today NVIDIA launched Open Agent Safety Platform , It is combination of the OpenShell software (first released in March 2026) and NVIDIA Sentry . OpenShell provides runtime to the agent while sentry (hardware reference design) provides out-of-band watchdog
OpenShell
- OpenShell is a open source secure runtime for AI agents . It defines and enforces system and data the agent interact.
- It runs AI agents to run in sandbox environment with kernel level isolation, controlled service access, credential management, and formal policy analysis.
- Developers determine files, network, tools , process and credential agent can access
- It provides Multi-tenant platform support, Formal policy verification, Extensible security and governance, Credential-protected service access, CPU and GPU execution.
- OpenShell enforces permission outside of the agents. There are three components to OpenShell
- OpenShell Gateway: Manages the lifecycles and policies of many sandboxes.
- OpenShell Supervisor: Paired with each sandbox, it runs outside the agent workload and checks outbound requests against policy.
- OpenShell Sandbox: Runs the workload with kernel-level controls over its filesystem and processes, and no network path except through the supervisor.
- As a enterprise or a platform team it is possible to implement OpenShell as a service to enhance security posture of your organization
NVIDIA Sentry
- NVIDIA Sentry implements monitoring and enforcement via NVIDIA Bluefield hardware . Sentry is programmable via NVIDIA DOCA and connects to the NVIDIA OpenShell policy
- It understands the agent by correlating agent interactions, policy decisions, and tool and data access to create a contextual record
- NVIDIA Sentry delivers added layer of security with hardware-based enforcement on NVIDIA BlueField, continuously monitoring agent activity through a trusted telemetry and detection pipeline and enabling millisecond-scale containment and quarantine (In Jensen Huang words)
Leave a comment