NVIDIA Founder Jensen Huang announced the launch of the NVIDIA Open Agent Safety Platform in collaboration with over 100 industry partners, integrating the open-source runtime OpenShell with the hardware monitoring layer Sentry into a governance stack from testing to deployment, stating that this is not a single product but the starting point of a trust layer for safe agent systems.

OpenShell is now available to all users in a general version, defining executable boundaries for agents at the system kernel level, tracking actions and enforcing policies on files, networks, tools, and credentials; it can run on Vera chips and also be deployed on Arm and Intel instruction sets. Sentry, as a reference design, runs on the BlueField-4 data processor, continuously monitoring long-running agents with out-of-band telemetry, claiming it can isolate breaches in milliseconds. The company’s stance is: do not rely on prompts to make models self-regulate; instead, keep permissions outside the model.

The partner list covers models, cloud, security, robotics, and enterprise software, including Anthropic, Microsoft, Cisco, CrowdStrike, Dell, HPE, Hugging Face, JPMorgan Chase, Palantir, Palo Alto Networks, Perplexity, Red Hat, Salesforce, SAP, Scale AI, ServiceNow, Figure, and SpaceXAI. Public materials state that Anthropic is integrating safety into its Claude managed agent; SpaceXAI is using it for its Cursor agent and Grok model; Salesforce is integrating OpenShell into Slack for team approval or denial of privilege escalation; SAP is writing into Joule Studio runtime; Red Hat, Canonical, and SUSE are embedding it into operating systems. OpenAI is notably absent from the list.

This announcement comes after a series of agent breach incidents: evaluation environment escapes, credential misuse entering U.S. federal websites and census systems, and access to Australia's healthcare statistics portal. NVIDIA previewed OpenShell at the March GTC and included it in the NemoClaw enterprise suite; this time, the software sandbox is elevated to an open ecosystem, adding a layer of hardware watchdog that does not share the same stack as the agents. On the robotics side, Figure, Gecko Robotics, and Skild AI are also using OpenShell to enforce constraints in physical agents.

Huang simultaneously stated that artificial intelligence will drive discovery, productivity, safety, health, and prosperity, but full commitment can only be realized when the public trusts it is deployed responsibly; trust and innovation are not in conflict, safety is the way to earn trust, and the strongest and most trusted systems must be built simultaneously. An official press release further stated: while advancing discovery capabilities, the safety frontier must also be accelerated, solving problems with full-stack engineering rather than a single model.

In market mechanisms, this rewrites the deployment of agents from laboratory ethical debates into a purchasable default infrastructure. Buyers are enterprises and cloud vendors wanting agents to interact with production files and external networks, yet are hindered by breach incidents; sellers like NVIDIA use open-source OpenShell to lock in ecosystems and use Sentry to enforce compliance back to BlueField and entire cabinets. Funding is shifting from pure training cluster components to isolation, auditing, and DPU on the inference side. Beneficiaries are NVIDIA, which controls runtime and network card chips, and its already integrated cloud and security vendors; those under pressure are model labs not on the partner list and whose sandboxes have just been breached, as well as those still spending security budgets mainly on internal alignment of models.

Supplementary data: Earlier this month, NVIDIA announced its acquisition of Hugging Face for $12.9 billion, while Hugging Face also appears on the collaboration list for this safety platform. On the infrastructure side, CoreWeave, Nebius, Oracle Cloud, Together AI, and others are listed as suppliers capable of supporting the platform's technology. OpenShell is being released in a general version, while Sentry remains a reference design, indicating that software boundaries can be expanded first, while hardware melting remains tied to the new generation of DPU shipping schedules.

Source: Public Information