NVIDIA published a reference architecture around the Apache-2.0 OpenShell agent runtime. OpenShell separates gateway, supervisor, sandbox and policy-prover controls from the agent workload. NVIDIA also previewed Sentry, a BlueField-4 hardware-isolated layer for traffic inspection, memory introspection and containment; Sentry is planned for early 2027, while OpenShell code is available now.
NVIDIA publishes an OpenShell architecture and previews Sentry
2026-10-21Verified announcementTRIAL
NVIDIA published a reference architecture around the Apache-2.0 OpenShell agent runtime. OpenShell separates gateway, supervisor, sandbox and policy-prover controls from the agent workload. NVIDIA also previewed Sentry, a BlueField-4 hardware-isolated layer for traffic inspection, memory introspection and containment; Sentry is planned for early 2027, while OpenShell code is available now.
What this means for you
For teams operating high-authority agents, the architecture makes external policy enforcement and tamper-resistant evidence concrete. Trial the software boundary now, but do not count the hardware layer as available or independently validated.
Evidence & related material
Technical details & scores
| Openshell | Apache-2.0 runtime with Gateway, Supervisor, Sandbox and Policy Prover |
|---|---|
| Sentry | BlueField-4 isolated DOCA Tower and Argus; planned availability early 2027 |
| Vendor Results | CoreWeave reports >3x faster sandbox startup and 1.8x agent-loop completion on Vera; not independently reproduced |
| Time Basis | official posts at 2026-10-21T09:50:14Z and 09:52:16Z |
Technical impact 5
Engineering value 4
Adoption signal 2
Maturity 2
Verification cost 3
Risk 3