Nvidia unveils OpenShell blueprint for setting boundaries on AI agents

The proposed stack puts model inference on Vera Rubin infrastructure and agent harnesses and tool use on Vera CPUs, which run OpenShell. Nvidia also includes BlueField-4 data processing units running Sentry software for monitoring and hardware enforcement. That hardware safeguard is optional for deployments seeking additional protection alongside OpenShell's software boundaries. Nvidia claims Sentry can quarantine and stop an agent in milliseconds; the announcement does not present an independent security test of that claim.

Nvidia says BBVA and Santander are exploring the architecture, while CrowdStrike and Palo Alto Networks are integrating support into their agent security products. Exploration does not amount to deployment.

Nvidia calls the reference architecture available. The same announcement cautions that many described products and features remain in various stages and will be offered on a "when-and-if-available basis." Availability of the blueprint is not a guarantee that every described feature is shipping.