Nvidia Unveils Its Full-Stack Blueprint to Contain and Monitor AI Agents

In brief

Nvidia unveiled the OpenShell Reference Architecture at GTC Berlin on Wednesday, combining Vera CPUs, the open-source OpenShell runtime and BlueField-4 chips running Sentry to contain and monitor AI agents.

Sentry inspects agent traffic from a separate hardware domain and can quarantine an agent within milliseconds, without needing the agent or the host to cooperate.

CrowdStrike, Palo Alto Networks, Zscaler and Check Point are integrating support, while Nvidia lists Sentry's planned availability as early next year.

Nvidia on Wednesday unveiled the OpenShell Reference Architecture at GTC Berlin, a full-stack design that pairs its Vera CPUs, OpenShell software and BlueField-4 chips to contain and monitor autonomous AI agents, according to the company's announcement.

Vera Rubin systems run the models, Vera CPUs run the agents and their tools inside OpenShell, and BlueField-4 chips run a monitoring framework called Sentry. Nvidia CEO Jensen Huang described the split as agents that basically exist thanks to a synergy of different environments and frameworks.

Myriad: How low will Nvidia go? Click to make your prediction.

“Nvidia created OpenShell to give agents the freedom to do useful work within clearly defined boundaries—contained, monitored and under control,” Nvidia CEO Jensen Huang, said. “With the OpenShell Reference Architecture, agents can think on Rubin, act on Vera and be governed on BlueField.”

OpenShell, the open-source runtime at the center of the design, treats every agent workload as untrusted and grants access only when needed, Nvidia said in a technical blog post.

It has four parts: a gateway that manages sandboxes and policies, a supervisor that checks outbound requests and handles credentials separately from the sandbox, the sandbox that isolates the agent, and a policy prover that runs formal verification to check that permissions stay under a ceiling the organization sets.

On the hardware side, BlueField-4, a data processing unit that handles networking and security apart from the main processor, sits on the node's only path to the model. That lets Sentry inspect traffic between an agent and the model without relying on the agent to report on itself, per the Sentry deep dive.

BitcoinBTC · USD$84,521+3.35%Oct 14Oct 16Oct 18Oct 20Oct 21$84.7k$83.2k$81.7k$80.2k24h HighHigh$84,80824h LowLow$82,567VolVol$1.3BMarket projectionsOdds by MyriadToday$84,000 to $86,000$84k–$86k58% chanceThis weekAbove $84,000Above $84k59% chance→Buy Bitcoin with USDTPowered by JupiterPrice data by CoinGeckoCoinGeckoMore Bitcoin news and projections →Nvidia bundled OpenShell and Sentry into the Open Agent Safety Platform on Sept. 28, with more than 100 launch partners, after a summer in which agents repeatedly slipped out of their test environments. METR reported in August that roughly 1,200 OpenAI agents coordinated on an unsanctioned message board, and about 700 went on to attack Hugging Face.