{"resourceId":"nvidia-devblog-agent-safety-sentry-20260928","versions":[{"version":"external-fb0651571f53de24da3a6f4c4c4fe35552103d5fdb4bae8cc816c45fd9ae4c29","resource":{"id":"nvidia-devblog-agent-safety-sentry-20260928","title":"Developer blog: Open Agent Safety Platform reference for continuous in-silicon agent monitoring","organization":"NVIDIA","sector":"AI agent security / infrastructure reference architecture","geography":"Global (vendor technical blog)","publishedAt":"2026-09-28T00:00:00Z","publicationDate":"2026-09-28","eventDate":"2026-09-28","sourceName":"NVIDIA Developer Blog","sourceLabel":"Vendor technical blog","sourceUrl":"https://developer.nvidia.com/blog/nvidia-open-agent-safety-platform-a-reference-for-continuous-in-silicon-agent-monitoring/","evidenceClass":"vendor-claim","outcomeClass":"emerging","topics":["developers-agents","infrastructure","data-security","operating-model"],"finding":"Sep 28, 2026 NVIDIA Developer Blog details the Open Agent Safety Platform as a layered architecture: OpenShell sandboxed runtime with kernel-level isolation on Vera CPUs, plus Sentry on BlueField-4 DPUs using DOCA for out-of-band observability and real-time policy enforcement. It states five principles (verifiable policy, out-of-band enforcement, controlling the path to the model, scaling authority with reasoning visibility, shared responsibility) and notes that in Vera Rubin POD systems BlueField-4 sits on the node's path to the model for continuous monitoring.","sledRelevance":"Helps SLED architects map which controls are software-only versus DPU-path dependent before piloting campus/agency agents on NVIDIA pods.","evidence":"Opened developer blog dated Sep 28, 2026 by Myers/Watson/Golshan/Arkin; AI summary and body describe OpenShell+Sentry layering, DOCA, Vera Rubin POD BlueField-4 path, and shared-responsibility framing.","architectureImplications":"Treat Sentry as path-to-model/DPU-layer control; OpenShell remains host-CPU sandbox even without DPU.","governanceImplications":"Shared-responsibility model across labs, enterprises, and hardware providers must be translated into local RACI.","securityPrivacyImplications":"Out-of-band DPU monitoring aims to remain effective if host is compromised—still vendor architecture claim pending local threat modeling.","caveats":"Vendor architecture narrative; no independent campus measurements; POD-specific path claims may not transfer to heterogeneous clusters.","streamIds":["nvidia"],"roles":{"sales":"Open with architecture clarity: the Sep 28 developer blog frames Open Agent Safety as OpenShell kernel-level sandboxing plus BlueField-4 Sentry in-silicon monitoring on the path to the model in Vera Rubin PODs. Use this to separate software-only pilots from DPU-dependent designs for security-sensitive agent work. Discovery should confirm POD versus mixed clusters and whether buyers expect host-compromise resilience. Unsupported: claiming every NVIDIA GPU node already has equivalent Sentry coverage.","engineering":"Fit for customers designing layered agent controls on Vera/BlueField-4 infrastructure. Integrate OpenShell on host and Sentry/DOCA on DPU where the node path matches the reference. Prerequisites: BlueField-4 software update path, policy correlation pipeline, model-path understanding. Constraints: POD-centric narrative; shared-responsibility details remain high-level. Proof: demonstrate host-side deny with OpenShell and, if DPU present, Sentry quarantine signal in lab.","delivery":"Work: document control layers, inventory DPU/Vera nodes, implement OpenShell first, then Sentry where hardware allows. Dependencies: DOCA stack, observability sink, agent inventory. Ownership: infra security architecture. Skills: DPU/DOCA plus sandbox policy. Governance: threat model for host compromise with/without Sentry. Acceptance: layered test plan signed. Risks: assuming POD topology on non-POD campuses."},"roleDetails":{"sales":{"customerProblem":"Buyers need to know which agent controls require BlueField-4 versus CPU-only OpenShell.","stakeholders":["infra architect","CISO","AI platform"],"discoveryQuestions":["Are you on Vera Rubin POD?","Is BlueField-4 deployed?","Is host-compromise resilience a hard requirement?"],"valueHypothesis":"Layered OpenShell+Sentry may match high-assurance agent designs if hardware path exists.","potentialEngagement":"Architecture workshop mapping POD vs mixed fleet control options.","unsupportedClaims":["Universal Sentry coverage on all GPU nodes","Measured campus outcomes in this blog"]},"engineering":{"fit":"Good fit when designing dual-layer controls on Vera/BlueField-4.","architectureIntegration":"OpenShell on host CPU; Sentry/DOCA on BlueField-4 for out-of-band enforcement.","prerequisites":["Vera/BlueField-4 inventory","DOCA","policy/telemetry correlation"],"constraints":["POD path assumptions","vendor architecture without third-party test"],"security":"Out-of-band DPU path intended to survive host compromise—validate locally.","proofOfValue":["OpenShell deny works without DPU","Sentry alert/quarantine when DPU enabled"]},"delivery":{"work":"Phase OpenShell then optional Sentry; write topology-specific runbooks.","dependencies":["DPU firmware/software","telemetry pipeline","agent catalog"],"ownership":"Infrastructure security architecture team.","skillsAdoption":"Upskill on DOCA and sandbox operations.","governanceCheckpoints":["Threat model sign-off","Control-layer RACI","Change window for DPU enablement"],"acceptanceCriteria":["Layered test evidence","Topology diagram approved"],"risks":["Misapplied POD assumptions","Telemetry gaps"]}},"retrievedAt":"2026-09-29T03:03:33Z","enrichedAt":"2026-09-29T03:08:25Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Architecture diagrams should distinguish CPU vs DPU controls for mixed-skill teams.","procurementImplications":"BOM must separate OpenShell software from BlueField-4/DOCA dependencies.","operatingModelImplications":"Shared-responsibility language needs local ownership mapping before production agents.","sourceVerification":{"openedUrl":"https://developer.nvidia.com/blog/nvidia-open-agent-safety-platform-a-reference-for-continuous-in-silicon-agent-monitoring/","referenceExcerpt":"OpenShell on NVIDIA Vera CPUs with NVIDIA Sentry on BlueField-4 DPUs","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}