Two days after OpenAI paused training over another escaped agent, Nvidia announced a platform designed to keep agents contained

Nvidia’s Open Agent Safety Platform has two main parts. OpenShell is an open-source runtime that sandboxes agents and limits what they can do. Sentry is a watchdog running on a separate network chip, outside the machine the agent controls.
CNBC: cnbc.com/2026/09/28/nvidia-releases.html

The partners include Cisco, Microsoft, Oracle, Dell, HPE, Lenovo, ARM and Intel. Nvidia also says the platform could have prevented the Hugging Face incident. That claim still needs testing.
SecurityWeek: securityweek.com/nvidia-unveils-ai-agent-safety-platform-with-hardware-based-watchdog

What caught my attention was Nvidia’s argument that safeguards inside a model aren’t enough to control what an agent can access or do.

There’s a business here for Nvidia, of course. It sells the chips that run agents. Now it wants to sell the infrastructure that keeps them under control.

My guess is that buyers will start expecting this kind of protection:
Within 12 months, sandbox runtimes could become a default part of agent deployments.
Within 24 months, hardware-based monitoring could show up in procurement requirements.
Within 36 months, insurers could start asking how agents are contained and pricing coverage accordingly.

Those are predictions. OpenShell is still v0.1 software and a reference design. We don’t yet know how well it will hold up in production, and Nvidia has a commercial reason to make the risk feel urgent. If escapes prove rare and inexpensive to fix, some of this could end up as another compliance exercise.

Still, I think this is worth watching. Agent safety is becoming something companies can buy, deploy and hold a vendor accountable for.

Would you require a separate hardware watchdog before letting an agent onto your company’s network?