NVIDIA Releases OpenShell Reference Architecture, Governing Agent Security with a Three-Layer Approach
NVIDIA has released the OpenShell reference architecture, arguing that Agents cannot govern themselves and that security and governance should be placed at the infrastructure layer, which Agents cannot reach. The approach has three layers: the open-source runtime OpenShell defines permission boundaries through Gateway, Supervisor, Sandbox, and a formally verified Policy Prover; Vera CPU provides 88 Olympus cores and 1.2 TB/s memory bandwidth, with CoreWeave measuring sandbox startup more than 3x faster and Agent tasks on Terminal Bench 1.8x faster; BlueField-4 DPU plus Sentry provides optional hardware-level monitoring that can isolate violating Agents within a few milliseconds.
NVIDIA has released the OpenShell reference architecture, arguing that Agents cannot govern themselves and that security and governance should be placed at the infrastructure layer, which Agents cannot reach. The approach has three layers: the open-source runtime OpenShell defines permission boundaries through Gateway, Supervisor, Sandbox, and a formally verified Policy Prover; Vera CPU provides 88 Olympus cores and 1.2 TB/s memory bandwidth, with CoreWeave measuring sandbox startup more than 3x
Matched fieldsTitle、Summary、Body
