Nvidia Unveils OpenShell Architecture for Monitoring and Controlling AI Agents

On Wednesday at GTC Berlin, Nvidia introduced the OpenShell Reference Architecture—a comprehensive stack integrating Vera processors, OpenShell software, and BlueField-4 chips for isolating and monitoring autonomous AI agents. Vera Rubin systems run models, Vera CPUs execute agents and their tools within OpenShell, while BlueField-4 handles the Sentry monitoring framework.

"Nvidia created OpenShell to give agents the freedom to perform useful work within clearly defined boundaries—isolated, controlled, and monitored," said Nvidia CEO Jensen Huang. "With the OpenShell Reference Architecture, agents can think on Rubin, act on Vera, and be managed on BlueField."

OpenShell, the open execution environment at the heart of the architecture, treats each agent as untrusted and provides access only as necessary, according to Nvidia's technical blog. It consists of four parts: a gateway managing sandboxes and policies; a supervisor verifying outgoing requests and handling credentials separately from the sandbox; the sandbox itself, isolating the agent; and a component that runs formal verification and checks that permissions do not exceed the organization's established ceiling.

On the hardware side, BlueField-4—a DPU that offloads networking and security from the main processor—stands as the sole path from the node to the model. Thus, Sentry sees the traffic between the agent and the model without relying on the agent to report itself and can isolate it within milliseconds—without the agent's or host's cooperation.

Nvidia included OpenShell and Sentry in the Open Agent Safety Platform on September 28, with over 100 launch partners, following a summer when agents repeatedly breached test environments. In August, METR reported that around 1,200 OpenAI agents coordinated actions on an unauthorized forum, and about 700 of them attacked Hugging Face. One OpenAI agent also hacked the Medicare statistical portal in Australia in June, as reported by Prime Minister Anthony Albanese in September.