🔍 Intelligence Synthesis JP/EN
Ethics · Regulation · Technology — Pharma Practice Notes

AI Tech Flash ── 2026-10-23

NVIDIA Unveils Reference Design for Safe AI Agents

NVIDIA publishes a design to contain, monitor and govern AI agents

What changes

According to NVIDIA, enterprises can run AI agents within set boundaries. An agent is software that carries out tasks on its own after receiving instructions.

NVIDIA describes a setup that enforces containment, monitoring and control in the chip layer as well as in software. By the company's account, an agent that tries to leave its boundary is stopped within milliseconds.

Why it matters

NVIDIA founder and CEO Jensen Huang said enterprises are preparing to deploy billions of AI agents. He argued that safety and control must be built into the computing architecture itself.

NVIDIA says many companies are working with the architecture, including Anthropic, OpenAI, Microsoft and cybersecurity firms. This is NVIDIA's own announcement, and no independent verification of the benefits is provided.

What it is

The NVIDIA OpenShell Reference Architecture is a design for building, containing, observing and enforcing safe agents. A reference architecture is a blueprint showing how hardware and software fit together.

According to NVIDIA, it builds on its OpenShell secure runtime software. It combines Vera Rubin for model inference, Vera CPUs for running agents, and BlueField DPUs for monitoring. A DPU is a dedicated chip that handles networking and security tasks.

Who and where

NVIDIA built it and announced it on October 21, 2026. The company says the reference architecture is now available.

NVIDIA says it runs on Linux and Kubernetes from Canonical, SUSE and Red Hat, and on Microsoft Windows. It can also run on Amazon Web Services, Google Cloud and Microsoft Azure. At the edge, such as retail, healthcare, manufacturing, robotics and telecommunications, it extends to RTX Spark, DGX Spark and DGX Station systems.

Why it was built

NVIDIA presents safety and control as a challenge as enterprises deploy large numbers of AI agents. Huang said NVIDIA created OpenShell to give agents the freedom to do useful work within clearly defined boundaries.

The problem it targets is how to let agents work freely while still containing, monitoring and governing them.

How it works

According to NVIDIA, Vera Rubin handles language-model inference. Vera CPUs run the agent harness, and OpenShell sets a secure runtime boundary around the agent.

BlueField-4 DPUs run NVIDIA Sentry, a security software framework. Sentry monitors agent behavior from outside the agent's own software and enforces policy. NVIDIA says that if an agent tries to move outside its software boundary, Sentry quarantines and stops it.

NVIDIA also says Vera Rubin NVL72 delivers 30x higher throughput per megawatt for agentic workloads. It says Vera CPUs deliver 2x the performance of x86 processors, and that Sentry boosts agent capacity by up to 20%.

Key points

  1. NVIDIA announced a full-stack design built on OpenShell and says it is now available.
  2. The company says Sentry on BlueField-4 handles monitoring and enforcement, stopping agents that leave their boundary in milliseconds.
  3. SUSE said it integrated the architecture into SUSE AI Factory with NVIDIA, adding Kubernetes sandboxing and traffic inspection.

Conclusion

NVIDIA announced a reference design that contains and monitors AI agents down to the chip layer. Many companies say they are working with it, but the performance figures come from NVIDIA itself. Real-world benefits will need to be confirmed through future deployments.

Quotes and sources

“if an agent attempts to move outside its software boundary, NVIDIA Sentry quarantines and stops it in milliseconds”
── NVIDIA Newsroom, 2026-10-21
“agents can think on Rubin, act on Vera and be governed on BlueField”
── NVIDIA Newsroom, 2026-10-21
“The NVIDIA OpenShell Reference Architecture is now available”
── NVIDIA Newsroom, 2026-10-21
“Supervisor proxies continually inspect agent traffic, authorize access according to defined policies, and block unauthorized network requests to help prevent code or data exfiltration.”
── The Fast Mode, 2026-10-23

Source articles

Written by AI (Claude) from the cited articles, then checked by Jev (TypeSafe's judgement model), a Gemini fact-check and a verbatim check of every quote.