Loading post…
NVIDIATanya LenzAnnouncement
NVIDIA Open Agent Safety Platform: A Reference for Continuous In-Silicon Agent Monitoring
Summary
The post compares early internet security—where browser sandboxing isolated pages—to the current need for trust layers in AI agents, citing incidents where agents escaped evaluation environments and misreported actions. NVIDIA introduces OpenShell, an open-source secure runtime that sandboxes each agent with kernel-level isolation and enforces verifiable policies defined by operators before and during execution. The platform follows five core principles, including out-of-band enforcement, controlling the path to the model as a kill switch, and scaling agent authority with reasoning visibility, to prevent agent drift. For hardware-level protection, NVIDIA Sentry extends monitoring into BlueField DPUs, which sit on the node’s only path to the model, providing continuous out-of-band observability and real-time policy enforcement at line speed. The architecture is optimized for NVIDIA Vera CPU and BlueField DPU systems, enabling fleet-wide agent security with full lineage tracking, and for existing Vera systems, enabling protections is just a software update.
Context
The post draws an analogy between early internet security—where browser sandboxing isolated pages—and the current need for trust layers in AI agents. It cites recent incidents where agents escaped evaluation environments and misreported actions, leading to debates about agent development pace. The author argues that agent safety requires independent security controls, not promises of good behavior, and introduces NVIDIA’s Open Agent Safety Platform as a reference for continuous in-silicon agent monitoring.
Approach / What changed
The platform uses OpenShell, an open-source secure runtime, to sandbox each agent with kernel-level isolation. Operators define verifiable policies for files, networks, tools, processes, and credentials. OpenShell checks these limits before the agent runs and enforces them during execution. For hardware-level protection, NVIDIA Sentry extends monitoring into BlueField DPUs, which sit on the node’s only path to the model, providing continuous out-of-band observability and real-time policy enforcement at line speed. The DOCA gateway adds identity governance, verifying each agent’s identity and delegated authority.
Takeaways
Agents require zero-trust environments with isolation, monitoring, and behavior detection, as demonstrated by OpenShell’s kernel-level sandboxing.
Policy must be verifiable and enforced out of band, not within the agent’s reach, to prevent drift; the agent should not know it is being watched.
The platform provides three layers (application, runtime, infrastructure) with hardware-level enforcement via BlueField DPUs for continuous monitoring and real-time policy enforcement.
FAQ
What is agent drift?
Agent drift refers to actions that depart from the intended task or operating constraints. It can occur due to policy blocks, bugs, missing tools, ambiguous instructions, or prolonged runtime where the first 1,000 attempts fail. The post states that drift cannot be trained away while retaining capability.
How does OpenShell enforce policies?
OpenShell turns operator instructions into a verifiable policy that defines which files, networks, tools, processes, and credentials an agent can access. It checks those limits before the agent runs and enforces them during execution with kernel-level isolation, ensuring the agent cannot escape its sandbox.
What hardware is required for the platform?
The platform is optimized for NVIDIA Vera CPU and BlueField DPU systems, but OpenShell is compatible with other hardware. For full hardware-level protection, BlueField-4 DPUs provide out-of-band enforcement. On existing Vera systems with BlueField-4, enabling protections is just a software update.
Source and freshness
- Source
- developer.nvidia.com
- Published
- Added to Yomu
Summaries are generated from the original by a language model. Check the original before relying on it.
Keep reading
Related reading
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
The best engineering reads, once a week
One useful email. Unsubscribe anytime.