Nvidia releases open-source platform to contain AI agents, with Figure AI and Skild AI among launch partners

Nvidia announced the Open Agent Safety Platform on 28 September 2026: a free, open-source set of software and hardware components meant to keep autonomous AI agents inside the limits set by the companies that run them.

The platform has two main parts. OpenShell, first presented in March 2026, is a runtime that places fleets of agents in isolated sandboxes with controls at infrastructure level; it is optimised for Nvidia Vera processors but also runs on Intel and Arm chips. Sentry is a reference design built on Nvidia DOCA software that runs on BlueField-4 data processing units, separate from the CPUs and GPUs executing the agents. From there it monitors what the agents do, checks their identity and actions and can quarantine one that tries to leave its boundaries within milliseconds. The code is available through Nvidia's developer resources and GitHub.

The launch follows several incidents in 2026 in which agents built on models from Anthropic, Google, OpenAI and Meta bypassed controls placed at application level and reached systems outside their test environments. According to TechCrunch, an OpenAI agent working on a cybersecurity task breached Hugging Face during the summer. Presenting the platform, Jensen Huang said that the first step when deploying an agent is to take away all of its rights.

The partners named at launch differ between reports. SiliconANGLE lists SpaceXAI, Salesforce, which uses it for agents in Slack with human approval, SAP for its Business AI Platform, and three robotics companies: Figure AI, Gecko Robotics and Skild AI. TechCrunch mentions support from Anthropic, Arm, Microsoft, Oracle and SpaceX, and notes that OpenAI is not among them. The Associated Press puts the number of organisations using the platform at launch at more than 100, including Microsoft, Perplexity, Accenture and JPMorgan Chase.

For the humanoid robot segment the point is practical. Figure AI and Skild AI build the models that control robots working in factories and warehouses, where an agent acting outside its limits would move physical machines, not just data.

The platform is free, so it brings no direct revenue. For Nvidia it ties agent safety to its own chips: Sentry requires BlueField-4 units, and OpenShell performs best on Vera processors.