Nvidia picks OpenShell to tame AI gents

Nvidia has proposed a new way to keep corporate AI agents in line.

Nvidia on Wednesday introduced its OpenShell Reference Architecture .

Based on the company's OpenShell secure runtime, It's a recipe for creating, operating, observing, and policing AI agents using OpenShell on Nvidia hardware.

"Nvidia created OpenShell to give agents the freedom to do useful work within clearly defined boundaries — contained, monitored and under control," CEO Jensen Huang said in a canned statement.

"With the OpenShell Reference Architecture, agents can think on Rubin, act on Vera and be governed on BlueField." AI agents are touted as a powerful automation technology.

The reality is that they can be unruly, as demonstrated by security testing OpenAI and Anthropic conducted, during which their models exceeded their remit and attacked third-party organizations.

Developers of existing agents, like Claude Code, Codex, OpenClaw, and OpenCode, therefore include controls that limit access to tools like curl and bash.

Devs also create sandboxes to isolate an agentic process from the host, so that if agents go awry they're contained.

OpenShell sits a level above that with a runtime that extends sandboxing to govern gateway-brokered credentials, identity and policy boundaries, and (eventually) routing and workflows too.

At least mostly – OpenShell still has a few open security-related issues listed on GitHub.

To implement OpenShell, organizations need Nvidia hardware.

The company's blueprint calls for Nvidia Vera Rubin infrastructure to run models like Nvidia Nemotron, with agent harnesses handled via Vera CPUs, and Nvidia BlueField-4 DPUs (aka SmartNICs) propping up Nvidia Sentry security software to monitor agent behavior.

The AI biz has made this blueprint available to partners capable of powering Linux and Kubernetes infrastructure.

The usual suspects are aboard: Canonical, SUSE and Red Hat.