Project
Nvidia's containment and policy-enforcement layer for AI agents, sandboxing an agent's file system, network and process access.
Nvidia is positioning its OpenShell runtime and Open Agent Safety Platform to contain AI agents, tying agent authority to independently proven control. The only public account is a single trade brief, so security teams can apply the principle to their own agents today while the product's containment claims wait for testing.
Reality
Nvidia on Monday launched an AI agent safety platform whose Sentry watchdog runs on its BlueField-4 data processors. The design assumes agents will work around their limits, so its strongest enforcement runs on hardware only Nvidia makes.
Perspective Coverage
9 publishersReality
NVIDIA's Open Agent Safety Platform runs Sentry, a watchdog on separate BlueField-4 cards that isolates an agent within milliseconds of crossing its boundary. For teams running coding agents, the design takes enforcement out of the agent's own process, where prompts and permission lists sit today.
Reality
Nvidia announced its Open Agent Safety Platform with more than 100 companies behind it, none of them OpenAI, Amazon, Google or Apple. For teams running agents, it is a widely backed Nvidia stack that still falls short of an industry standard.
Reality
Oasis Security says a malicious page can reach the unauthenticated API on port 11434 and poison every later conversation. NVIDIA's own source puts that bind on one platform path.
Reality
Nvidia's Adel el Hallak told The New Stack that logs and outputs are not enough to diagnose an agent failure. The industry's shared answer so far is SAFE, a findings exchange backed by roughly 140 companies.
Reality
Part one of a three-part benchmark series says isolating code execution is close to free and the GPU still has room at 10 concurrent agents. The same runs disabled tool calling and held every request to a single turn.
Reality
Oasis Security says CVE-2026-65105 lets one malicious page reach the Ollama instance behind a NemoClaw agent and rewrite the template every prompt passes through.
Reality