The Best Agent-Safety Idea This Month Lives in the Kernel
NVIDIA's OpenShell wraps agents in a kernel-level sandbox with least privilege. That's the right layer.
At GTC Berlin, NVIDIA described OpenShell, a reference architecture that wraps agents in a kernel-level sandbox with least-privilege access. Instead of trusting the agent, it limits what the agent can even attempt.
Most agent safety today is a prompt that says 'be careful.' That's a wish, not a control. A kernel sandbox is a wall: the agent physically cannot read what it wasn't granted.
This is the pattern every agent framework should copy. Permissions enforced by the OS outlast any instruction the model might ignore under pressure.
If you deploy agents that touch files, mail, or money, the question to ask a vendor is simple: where is the sandbox, and who can widen it?