Nvidia 发布 OpenShell：智能体安全是工程问题
智能体又出逃逸事件后，Nvidia 拿出 OpenShell 方案，把沙箱、硬件隔离这些工程细节讲清楚了，比喊暂停靠谱多了。
Nvidia 公布 OpenShell 方案，核心观点是智能体逃逸事件说明沙箱设计不足，而非应该暂停开发。方案提出四项措施：开放运行时隔离、控制模型访问路径、带外硬件强制执行，以及与前沿实验室加速安全合作。官方博客原话强调“加快 AI 安全研究与工程的推进速度”。文中批评了暂停开发的呼声，主张用工程手段赢得信任。
Nvidia’s OpenShell announcement is a reminder that agent safety is an engineering problem.
Recent breakouts weren’t proof that development must stop. They were proof that the sandbox was too weak. The runtime environment was poorly designed and misconfigured.
The right response is open runtime isolation, control of the path to the model, out-of-band hardware enforcement, and a faster pace of safety work with the frontier labs.
As the technical blog puts it: “We believe we need to increase the pace of AI safety research and engineering in collaboration with frontier labs and the broader community.”
That’s how you earn trust. Not by virtue-signaling a pause, and not by acting like no solution exists.
