NVIDIA put the agent watchdog outside the host
OpenShell 0.1.0 separates an agent workload from the supervisor that holds policy and credentials, while NVIDIA's optional Sentry design moves a second enforcement layer onto a BlueField DPU. The architecture improves failure isolation, but it does not solve policy correctness or prove containment effectiveness.