Nvidia Launches Open Agent Safety Platform: OpenShell and Sentry to Quarantine AI Agents

By Carlos Montiel | Enterprise AI Specialist
Leer en español →
Published: 2026-10-02 | By: Carlos Montiel | Reading time: ~5 min

On September 28, Nvidia announced an open platform for monitoring and stopping runaway AI agents, with controls that run separately from the agent and can quarantine it in milliseconds.

What the platform is

The Open Agent Safety Platform combines open-source software with a reference hardware design to keep agents within defined boundaries, from testing through production. It has two core pieces: OpenShell, open-source software that creates a secure execution boundary around the agent, monitors its actions, and enforces policies on which systems, data, and tools it can access; and Sentry, a layer built on Nvidia's BlueField-4 DPUs that watches independently and can quarantine an agent in milliseconds if it tries to operate outside what's allowed.

Why the "outside the agent" design matters

The underlying argument is that some safeguards run outside the agent's own software environment, which makes them harder for an autonomous system to bypass. Jensen Huang framed it this way: AI safety requires controls across the whole compute stack, not just restrictions inside each model. According to coverage, OpenShell can be extended to Arm and Intel compute platforms.

Who's participating

Nvidia says more than 100 organizations are participating, including Anthropic, Microsoft, SAP, Scale AI, Cisco, Salesforce, ServiceNow, CrowdStrike, and Palo Alto Networks, along with financial institutions and infrastructure and robotics companies.

Announced: September 28, 2026 Software: OpenShell (open source, execution boundary and policies) Hardware: Sentry on BlueField-4 (millisecond quarantine) Participants: 100+ organizations

What it means for a company deploying agents

Business impact: the message is that guardrails inside the prompt aren't enough. If your agents touch your ERP, email, or customer databases, you need three things that are independent of the model: least-privilege permissions per tool, action monitoring outside the agent's process, and a fast kill switch. Even if you never buy Nvidia hardware, the OpenShell pattern (sandbox plus explicit policies) can be replicated today with open tools. Ask your agent vendors how they isolate agents and how they stop one that goes out of scope.
Carlos Montiel
Enterprise AI Solutions Architect
LLMs, Agents & Orchestration Specialist
guatemalia.com/#contacto · info@guatemalia.com

Need to implement AI in your company?

Carlos Montiel is an enterprise AI solutions architect. He implements LLMs, Agents, RAG and orchestrators for companies across Guatemala and Latin America. Reach out for a consultation.

Contact Carlos Montiel

info@guatemalia.com