SAP, a member of the Open Invention Network community, is contributing engineering expertise to NVIDIA OpenShell, an Open Source runtime designed to constrain how autonomous AI agents operate. In a September 28, 2026 update, SAP described contributions spanning architecture, Kubernetes operations, infrastructure support and monitoring.
OpenShell provides a controlled environment for running AI agents, with boundaries around their execution and access to resources. This is runtime security: controls applied while software operates. SAP’s collaboration with NVIDIA also aims to connect these technical boundaries with business permissions and audit trails, helping organizations govern both how agents operate and whether particular actions are authorized.
Engineering Contributions to Shared Software
SAP has helped separate OpenShell’s supervisory functions from agent execution so those components can scale independently. Its Kubernetes contributions include operator support, private-registry credentials, storage templates and sandbox-resource cleanup.
Additional work addresses a smaller gateway image, support for different computing environments, supervisor health checks and configurable logging. These contributions focus on the operational foundations enterprises need to deploy and monitor shared software.
SAP and NVIDIA are also pursuing integration with SAP Business AI Platform and Joule Studio’s governance capabilities. Further runtime hardening, connections to enterprise authorization and audit systems, and regulated-industry enablement remain ongoing work. These objectives should be distinguished from the specific engineering contributions SAP has already described.
