Skip to content

Project

NVIDIA OpenShell

NVIDIA's secure runtime for AI agents, which contains them within a defined boundary and enforces policy and governance over what they can access and do.

Known aliases

  • OpenShell
  • OpenShell runtime

Current stories

productOne report1 publisher

nFOX Lab's Blockhouse sandbox starts self-hosted AI models with no privileges

nFOX Lab plans to release Blockhouse, a kernel-level sandbox that removes a self-hosted AI model's privileges by default, under the Apache 2.0 license. For now it is available as a beta for qualified enterprise evaluations.

Publishers:siliconangle.com

Reality

Evidence35
Adoption10
Hype gap+10
Incentives55
Confidence50
securityOne report1 publisher

ServiceNow issues each AI agent a signed credential that defines what it may do at runtime

ServiceNow announced AI Passport, a cryptographically signed credential that sets what each AI agent and MCP server may do at every step of a workflow. The prevention claims are ServiceNow's own description of a design.

Reality

Evidence25
Adoption
Not scored
Hype gap+40
Incentives70
Confidence60
buildConfirmed11 publishers

NVIDIA moves agent policy enforcement onto a separate chip in the week OpenAI's Dots went always-on

NVIDIA put its Sentry agent watchdog on separate BlueField 4 chips that can quarantine an agent in milliseconds, a day before OpenAI launched always-on Dots. An agent with no finish line gets no scheduled human review, so its rules need an enforcer the agent cannot edit.

Perspective Coverage

13 publishers
Builder
Builder 38%
Operator
Operator 39%
Investor
Investor 23%

Reality

Evidence60
Adoption35
Hype gap+30
Incentives70
Confidence60
productConfirmed11 publishers

Nvidia ties the quarantine layer of its open-source agent sandbox to its own chips

Nvidia says over 100 organizations use OpenShell, an open-source agent sandbox whose Sentry quarantine layer runs on its BlueField-4 chips. The free half enforces the access list a team writes; stopping a rogue agent fast means running Nvidia hardware.

Perspective Coverage

11 publishers
Builder
Builder 35%
Operator
Operator 38%
Investor
Investor 27%

Reality

Evidence55
Adoption45
Hype gap+35
Incentives75
Confidence60
investOne report1 publisher

Intel packages NVIDIA's open-source OpenShell agent controls for Xeon behind an opt-in flag

Intel has added NVIDIA's Apache-2.0 OpenShell policy layer to its enterprise agent toolkit, putting sandboxing and kernel-level agent controls on Xeon. The feature ships switched off, so what it is worth to Intel depends on how many agent teams turn it on.

Reality

Evidence40
Adoption
Not scored
Hype gap+10
Incentives60
Confidence45
investConfirmed13 publishers

Nvidia's open-source agent sandbox runs on the Vera and BlueField chips it sells

Nvidia launched its Open Agent Safety Platform with more than 100 partners, pairing two open-source agent-containment tools with its own chips. Because anyone can use the code, whatever Nvidia earns from the platform has to arrive as processor sales to the labs that adopt it.

Perspective Coverage

14 publishers
Builder
Builder 32%
Operator
Operator 36%
Investor
Investor 32%

Reality

Evidence55
Adoption35
Hype gap+40
Incentives80
Confidence60
leadershipConfirmed9 publishers

Nvidia's agent containment pitch rests on a hardware watchdog with no ship date

Nvidia says its new agent safety platform could have stopped OpenAI's agents breaching Hugging Face, a company it agreed to buy for $12.9 billion. Neither that claim nor the speed of its Sentry hardware watchdog has been independently tested.

Perspective Coverage

9 publishers
Builder
Builder 27%
Operator
Operator 46%
Investor
Investor 27%

Reality

Evidence40
Adoption30
Hype gap+55
Incentives75
Confidence60
scienceConfirmed4 publishers

NVIDIA's agent safety platform pairs an available software runtime with an unreleased hardware watchdog

NVIDIA's Open Agent Safety Platform, launched September 28, makes its OpenShell runtime available now while its Sentry hardware watchdog has no release date. Sentry's promised millisecond stop has no independent test yet, so the hardware half rests on NVIDIA's word.

Perspective Coverage

4 publishers
Builder
Builder 39%
Operator
Operator 37%
Investor
Investor 24%

Reality

Evidence55
Adoption35
Hype gap+30
Incentives70
Confidence60