SAP and NVIDIA plan to connect OpenShell with SAP’s agent platform

SAP announced deeper collaboration with NVIDIA alongside the announcement of NVIDIA Open Agent Safety Platform and broad availability of OpenShell.[1] The companies plan to bring SAP Business AI Platform together with OpenShell, which SAP describes as an open-source secure runtime for autonomous AI agents.[1] SAP says its engineers are contributing directly to OpenShell’s codebase and embedding the software within SAP Business AI Platform.[1] SAP describes Joule Studio as an AI-first development environment with an execution and governance stack for enterprise agents.[1] The aim, according to SAP, is to make those agents safer, more governable and easier to audit by design.[1]

SAP describes Joule Studio runtime as applying business authorization, role-based policy and process context before an action request reaches the runtime.[1] OpenShell, by contrast, governs how an agent executes, what it can see and do, and where its inference goes, according to SAP.[1] The companies are working to connect OpenShell’s runtime isolation with Joule Studio’s business governance, including authorization models, identity and access management, and audit trails.[1] SAP says the intended result is execution containment and business accountability in one integrated system.[1] This is a planned combination of controls, not evidence that every integration step is complete.[1][3]

SAP says it has helped decompose OpenShell’s runtime into independently deployable components so its supervisor and agent execution layers can scale separately.[1] Its Kubernetes contributions include operator support, private-registry image-pull secret management, custom volume claim templates and foreground deletion of sandbox resources.[1] SAP says it has worked to reduce the gateway image footprint and extend compute-driver support for heterogeneous enterprise infrastructure, and that its contributions to supervisor health monitoring and structured log-level configuration are intended to bring OpenShell to enterprise observability standards.[1] SAP characterizes these changes as work to harden OpenShell for enterprise-scale deployment, including in regulated industries with strict security and compliance requirements.[1]

NVIDIA says its OpenShell Reference Architecture enables building, containing, observing and enforcing safe agents on enterprise infrastructure and edge systems.[2] NVIDIA says the architecture combines Vera Rubin infrastructure, Vera CPUs, OpenShell software and BlueField DPUs running NVIDIA Sentry; Sentry provides out-of-band monitoring and in-silicon policy enforcement.[2] NVIDIA says Sentry can quarantine and stop an agent in milliseconds if it tries to leave its software boundary.[2] The reference architecture is available, but that does not automatically complete its integration with SAP.[3] SAP and NVIDIA say FedRAMP, FIPS and regulated-industry enablement are on a committed roadmap, while Joule Studio runtime is free to SAP customers and partners through October 2026.[1]