
NVIDIA OpenShell and Sentry: Agent Safety Below the Model
NVIDIA split agent safety into two layers: OpenShell sandboxes the agent, Sentry watches it from BlueField-4 silicon. The split is the actual idea.
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…

NVIDIA split agent safety into two layers: OpenShell sandboxes the agent, Sentry watches it from BlueField-4 silicon. The split is the actual idea.

AI agents hold credentials and act on the world. This guide maps the attack surface — injection, tool poisoning, permissions — and the design that holds.

Tool descriptions are the one input your agent always trusts. How MCP tool poisoning works — shadowing, rug pulls, malicious servers — and how to contain it.

Google's Sovereign Agent Mesh is a zero-config, zero-trust P2P overlay that lets AI agents share tools across networks without exposing private endpoints.