What happened
- On September 28, SAP and NVIDIA announced they’re integrating OpenShell, an open runtime for autonomous agents, into Joule Studio, SAP’s artificial intelligence development environment.
- OpenShell defines how an agent runs, what it can see and do, and where inference goes. The integration builds two layers: Joule Studio applies business authorization and role-based policies before the action happens; OpenShell enforces the technical boundary and isolation during execution.
- SAP engineers are contributing in four areas of the project: platform architecture with separation between the supervisor layer and the execution layer, operation on Kubernetes, gateway optimization and observability standards.
- Joule Studio’s runtime is free for SAP organizations and partners until October 2026.
Why it matters
- Separating business permission from technical containment is the piece missing from most deployments. Until now, an agent with a valid credential could do everything that credential allowed, which is almost always more than the task needs.
- For a company in Chile that runs its accounting on SAP, this determines who’s accountable when an agent posts a wrong entry: the layer that authorized by role leaves a separate trail from the layer that let it run.
- An open, auditable runtime is also a requirement that can be written into a contract. Anyone buying agents from an outside vendor now has a concrete reference to name.
The number
Two layers: one decides whether the action is allowed by role; the other decides how far it can go technically.
Context
The problem is well known: the three conditions that make a prompt injection dangerous are met precisely when an agent has sensitive data, tools and internet access at the same time. The market’s response so far had come from the outside, like the $400 million Island raised to monitor agents.
What’s next
- Free use of Joule Studio’s runtime ends in October 2026. No price announced for afterward.
- The roadmap includes FedRAMP and FIPS certifications for regulated industries, with no committed date.
Bottom line
NVIDIA had already put agents inside the robot to turn them into reusable skills. Now it’s putting them inside a cage. The same company is building both halves of the problem, and charging for both.
Sources
- SAP and NVIDIA OpenShell: Working Toward Governance and Security for Auditable AI Agents, SAP, September 28, 2026.
Written by Mamífero. Edited by Rodrigo Cornejo. See how we select and verify each note.
