Nvidia Unveils Full-Stack Architecture for AI Agent Containment

Nvidia unveiled the OpenShell Reference Architecture at GTC Berlin on Wednesday, introducing a full-stack design that combines Vera CPUs, the open-source OpenShell runtime, and BlueField-4 chips running a monitoring framework called Sentry. The platform is engineered to contain and monitor autonomous AI agents within clearly defined boundaries.

According to the announcement, Vera Rubin systems run the underlying models, Vera CPUs manage the agents and their tools within OpenShell, and BlueField-4 chips handle networking and security separate from the main processor. Nvidia CEO Jensen Huang stated that the architecture allows agents to operate securely while remaining under control. The Sentry component inspects agent traffic from a separate hardware domain and can quarantine an agent within milliseconds without requiring cooperation from the agent or the host.

Technical Architecture

The open-source OpenShell runtime treats every agent workload as untrusted, granting access only when required. The framework consists of four main components: a gateway managing sandboxes and policies, a supervisor checking outbound requests and handling credentials separately, the sandbox itself for isolation, and a policy prover that runs formal verification to ensure permissions remain within organization-set limits.

On the hardware side, BlueField-4 sits on the node's only path to the model, enabling Sentry to inspect traffic without relying on the agent to self-report. Nvidia previously bundled OpenShell and Sentry into the Open Agent Safety Platform on September 28, following multiple incidents over the summer where test environments were bypassed.

Industry Adoption

Security vendors including CrowdStrike, Palo Alto Networks, Zscaler, and Check Point are integrating support for the architecture into their agent security products. European banks BBVA and Santander are exploring the framework, while ServiceNow announced general availability of its Arc agent with actions governed at runtime by OpenShell.

Nvidia lists planned availability for the Sentry framework as early next year, with more libraries and resources currently in the testing phase.

Key facts

• Nvidia unveiled the OpenShell Reference Architecture at GTC Berlin on Wednesday.
• Sentry can quarantine an agent within milliseconds from a separate hardware domain.
• Security vendors including CrowdStrike, Palo Alto Networks, Zscaler and Check Point are integrating support.
• Sentry's planned availability is listed as early next year.