NVIDIA plans an agent security boundary outside the host computer

NVIDIA’s Sentry design places agent monitoring and access enforcement on a BlueField-4 data-processing unit, separate from the host running the agent. Its gateway inspects configured network traffic and combines policy checks with observations of host processes and memory. The aim is to keep a compromised agent from disabling its own controls. Sentry is planned for early 2027, so this is an architecture announcement rather than protection to install today.

NVIDIA Technical Blog · Oct 21, 2026

Why it matters

A control boundary is stronger when the workload it governs cannot edit or disable the enforcement mechanism.

More context

The design combines an Envoy-based gateway, Open Policy Agent rules and DOCA Argus memory introspection. Watch Sentry’s availability and hardware requirements; existing DOCA libraries provide an earlier experimentation path. The architecture assumes BlueField sits on the agent’s only route to models and outside services.

Keep in mind

The guarantees depend on the enforced network path, inspection configuration and hardware trust boundary. NVIDIA’s containment and integrity claims were not independently tested, and pricing is not specified in the inspected article.

Original read