OpenShell isolates execution at the kernel level and refuses to start if an escape path is proven; Sentry inspects traffic from a BlueField-4 adapter, out of range of the host.
Nvidia presented on 28 September, with over 100 industrial partners, an open security platform for AI agents. It is based on two complementary bricks: OpenShell, a secure execution environment licensed under Apache 2.0, and Sentry, a monitoring service that runs on BlueField cards.
OpenShell translates administration parameters into verifiable rules before the workload starts, with kernel isolation; a formal prover simply blocks execution if it establishes the existence of a path of escape. Sentry takes over the hardware side: installed on a BlueField-4 placed on the host node access road, inspects network packets and tool calls at link speed, produces telemetry and acts as an external shutdown switch — out of reach, therefore, of the software it monitors.
The architecture is organized into three floors: the application resources (models, pipelines, scripts), the execution boundary of OpenShell, and the physical infrastructure whose telemetry is verified via the DOCA software layer. Companies already equipped with Vera and BlueField-4 can activate these protections by simple software update. "Safety is the way to gain confidence," said Jensen Huang.
Read the full article on the original source
Go to the source →