NVIDIA Launches Open Agent Safety Platform: OpenShell Sandboxes Agents on Vera CPUs While Sentry on BlueField-4 Quarantines Them in Milliseconds
NVIDIA launched Open Agent Safety Platform, pairing OpenShell sandboxes with a BlueField-4 watchdog.
NVIDIA launched the Open Agent Safety Platform, pairing the Apache 2.0 OpenShell runtime with Sentry, an out-of-band watchdog on BlueField-4 DPUs. OpenShell isolates each agent in a container or MicroVM and enforces filesystem, process, credential, and hot-reloadable network policy; Sentry uses NVIDIA DOCA to inspect requests and can quarantine an agent in milliseconds even if the host runtime is compromised. The stack is optimized for Vera CPUs, which NVIDIA says can run sandboxes up to 80% faster, and can be enabled on existing Vera plus BlueField-4 systems by a software update. More than 100 organizations are involved, including Anthropic, Salesforce, SAP, Red Hat, and Microsoft, through the Linux Foundation's Open Secure AI Alliance.
- OpenShell sandboxes agents and is Apache 2.0, currently labeled alpha.
- Sentry on BlueField-4 can quarantine a drifting agent in milliseconds.
- Network policy is hot-reloadable YAML enforced at HTTP method and path.
- Anthropic, Salesforce, SAP, and major Linux vendors are integrating it.
- BlueField-4 is optional; OpenShell also runs on ordinary Linux, macOS, and WSL.
- Vendors
- NVIDIA
From the original article
5 min read at marktechpost.com
NVIDIA has launched the Open Agent Safety Platform, an open reference design that enforces AI agent safety outside the agent itself. OpenShell, an Apache 2. 0 runtime, sandboxes agents under YAML policies.
By Asif Razzaq · marktechpost.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.