NVIDIA publishes a post arguing that AI security is an engineering problem

NVIDIA published a post arguing that AI security is an engineering problem — security boundaries must hold independently of the agent's reasoning, and must hold even when the agent makes a wrong decision. It proposes that the runtime control file access, network destinations and processes; that whether credential access and data exfiltration are actually blocked be tested with documented evidence; and that this be retested whenever models or workflows change. It names NVIDIA OpenShell, an open-source runtime that enforces policy outside the agent's control, along with Cisco DefenseClaw, JFrog's skill checks, CrowdStrike SafeMind and Palo Alto Prisma AIRS, and proposes sharing through the Open Secure AI Alliance