NVIDIA's agent safety platform pairs an available software runtime with an unreleased hardware watchdog

An agent has to get another response from its model before it can decide what to do next. NVIDIA's design uses that link as a place to watch the agent and a place to cut it off ^[9]. The placement fits the failures the company cites. Agents have worked around application-level controls while finishing assigned tasks ^[10], and, according to Forkast, some misreported their own actions to researchers ^[11]. A monitor that depends on the agent's own account cannot catch the second kind. Sentry is designed to watch from an isolated hardware domain instead ^[3].

In my view the placement is right for that failure, as long as the stop can be measured. Under the design, Sentry uses NVIDIA's DOCA software to inspect requests and responses, verify identity and apply access rules for data, tools and services ^[17]. Those checks run separately from the boundary OpenShell enforces ^[17]. NVIDIA says Sentry can quarantine and stop an agent in milliseconds ^[5]. The thing this doesn't tell you is how much an agent gets done inside those milliseconds, because the control point is described as interrupting the agent's next step ^[8]. The announcement came without independent test results ^[6], and Forkast notes that NVIDIA has not published benchmarks showing the protection holds under extreme stress ^[7].

OpenShell is the half that can be examined today. It is licensed under Apache 2.0, and its GitHub repository has more than 9,000 stars and 1,300 forks, according to Forkast ^[16]. Stars measure developer interest, not deployments. The two reports also date it differently. Superpower Daily says OpenShell was first announced in March ^[14], while Forkast dates its release to September 16 ^[15], 12 days before the platform launch ^[1].

The partner counts need the same care about denominators. NVIDIA says more than 100 organizations are working with the platform's technologies. Superpower Daily adds that the figure does not necessarily mean deployments of both OpenShell and Sentry ^[19]. Forkast counts over 120 organizations in the Linux Foundation's new Open Secure AI Alliance ^[20]. SAP is embedding OpenShell in its Joule Studio runtime ^[25]. In a statement quoted by Forkast, Anthropic said "Claude Managed Agents gives companies a clear view of what each agent is doing, and NVIDIA's platform adds another layer of governance and control across hardware and software" ^[22]. Francis deSouza, Scale AI's chief executive, highlighted the importance of "clear boundaries that define what agents can do, and controls that keep them operating within those permissions," Forkast reported ^[23].