NVIDIA Sentry monitors and contains AI agents from a BlueField-4 hardware layer

NVIDIA Sentry is part of the NVIDIA OpenShell reference architecture and is built on NVIDIA DOCA. DOCA Tower, built on Envoy, sits on the only network path between an agent and the model and terminates TLS for inspection. A DOCA Flow layer-4 firewall in silicon restricts each agent to approved destinations before traffic reaches DOCA Tower.

Policy decisions use Open Policy Agent with Rego rules, which can check container hashes, process hashes against the container software bill of materials, and approved execution paths. DOCA Argus performs agentless live memory introspection of the host from BlueField-4, mapping containers, processes and loaded libraries to correlate them with network requests.

Specialized models classify agent tool calls and reasoning traces inline or out of band to flag behavioral drift. When a deviation is detected, Sentry can contain an agent in silicon within milliseconds, and it records tamper-evident telemetry that enterprise SIEM and XDR platforms can consume. NVIDIA says core plugins are planned, and developers can experiment now with the available DOCA Argus, DOCA Flow and OVS-DOCA libraries.

Teams running agents on NVIDIA BlueField-4 hardware can enforce network and runtime policy outside the agent and host, so a compromised agent cannot change its own restrictions or its logs.

Agent builders on other infrastructure cannot use Sentry today, but the DOCA libraries are available for trying out out-of-band observability and infrastructure enforcement. Plan for policies that check container identity and tool use, not just the agent's own reports.