Nvidia released OpenShell, which uses CPU hardware features to contain AI agents, and Sentry, which uses a separate chip to cut an agent off if it tries to escape that container. Nvidia says the system could have prevented the Hugging Face breach disclosed this summer; that remains the company's counterfactual claim, not an independently demonstrated result. The design direction is nonetheless important. Permissions written only into prompts are advisory. Hardware-backed isolation gives the operator a boundary the model cannot negotiate away, and Nvidia is working with Arm and Intel so the mechanism is not confined to its own CPUs. Reuters, September 28