Nvidia unveils a cage for AI agents: a chip can stop one in milliseconds
Nvidia introduced the OpenShell Reference Architecture, a ready-made design of its chips and open software that locks AI agents in a sandbox and watches them at the hardware level.
事件: 2026年10月21日
原始来源: 2026年10月21日
本站发布时间: 2026年10月21日 21:00 UTC
阅读: 2 分钟
发生了什么
On 21 October at GTC Berlin, Nvidia introduced the OpenShell Reference Architecture. It is a blueprint for companies: models run on Vera Rubin servers, agents run on Vera processors inside the open-source OpenShell software, and a separate BlueField-4 chip running Sentry watches what they do.
为什么和你有关
AI agents are programs that do tasks on their own: write code, browse sites, move money. The more access they have, the bigger the risk they step out of bounds. Nvidia wants such systems built on its hardware, which is another line of future revenue.
要核实和关注什么
How many companies actually deploy it, not just announce a partnership. When Sentry ships: Nvidia's technical material says early next year. And how regulators react.
How it works. OpenShell treats every agent as untrusted and grants access only when needed. The design has a gateway that runs sandboxes and policies, a supervisor that checks outgoing requests and keeps credentials separate, the sandbox itself, and a policy prover that mathematically checks that an agent's permissions stay under a set ceiling.
Why a separate chip. BlueField-4 is a network processor that works apart from the main one. It sits on the only path between the agent and the model, so it sees all traffic even if the agent reports nothing about itself. Nvidia says that if an agent tries to break out, Sentry quarantines and stops it in milliseconds.
Who is on board. Nvidia's list includes Anthropic, AWS, Google Cloud, Microsoft, OpenAI, Meta, SAP, ServiceNow and others. CrowdStrike, Palo Alto Networks, Zscaler and Check Point are building support into their products. Banks BBVA and Santander are exploring it as a base for agent safety. ServiceNow made its Arc agent, governed by OpenShell, generally available the same day.
Why now. In September Nvidia already bundled OpenShell and Sentry into an agent safety platform. The news follows high-profile cases of agents slipping out of their test environments. The architecture is available now, but some parts, including Sentry, are still in progress.
已确认的事实
- Nvidia unveiled the OpenShell Reference Architecture at GTC Berlin on 21 October 2026.[1][2]
- It combines Vera Rubin servers for models, Vera CPUs for agents, open-source OpenShell software and BlueField-4 chips running Sentry.[1]
- Nvidia says that if an agent tries to move outside its boundary, Sentry quarantines and stops it in milliseconds.[1][2]
- CrowdStrike, Palo Alto Networks, Zscaler, Check Point and others are integrating support, and BBVA and Santander are exploring it.[1][2]
- ServiceNow announced general availability of its Arc agent, whose actions are enforced by OpenShell.[1]
- Nvidia says the architecture is available now, while its Sentry technical material lists availability as early next year.[1][2]
- Jensen Huang: agents can "think on Rubin, act on Vera and be governed on BlueField."[1]
影响
- 已确认Major AI labs, cloud providers and cybersecurity firms have backed Nvidia's design.
- 我们的解读If it becomes a standard, companies will buy not only GPUs from Nvidia but also CPUs and network chips for agents.
- 我们的解读Agent safety is turning into its own market for both Nvidia and cybersecurity companies.
仍未知
- How much such a system costs and how many customers have bought it.
- When Sentry becomes widely available.
- How well the design holds up against real attacks.
影响到谁
World. Anyone holding Nvidia or cybersecurity stocks, or working with AI agents
来源
封面：Freekonomist 图示，象征性图片，不是事件现场照片。 这是新闻解读，不构成投资建议。
更多报道
Tesla beats forecasts, but profit falls 43% as money flows into AI and robots
Tesla's third-quarter revenue stayed at last year's level of $28 billion, while net profit fell 43% as the company spends more and more on AI, robots and the Cybercab.
Bitget and MEXC leave Russia. Where to move: WEEX
Bitget closed new positions for Russia, Belarus and Kazakhstan, and MEXC is leaving Russia and Belarus. If your money is there, withdraw early.
Solana switches on Alpenglow: transactions become final in a blink
On 21 October the Solana network moved to its new Alpenglow consensus, which aims to make a transaction irreversible in about 150 milliseconds.
每天早上，2 分钟看懂市场
隔夜发生了什么、意味着什么、今天该关注什么。用大白话讲清楚，而且围绕你关注的资产。一键退订。