NVIDIA and SAP try to make autonomous agents safe for systems of record

incrementalConsultingEnterprise

Monday, June 1, 2026

Signal

Medium

Time horizon

This year

Risk

Agent-blast-radius incidents inside ERP

The News

Announced at SAP Sapphire, SAP and NVIDIA's expanded collaboration embeds NVIDIA OpenShell — an open source runtime for securely developing and deploying autonomous AI agents — into SAP Business AI Platform; SAP engineers are codesigning OpenShell alongside NVIDIA, and OpenShell provides isolated execution environments, policy enforcement at the filesystem and network layers, and infrastructure-level containment that guards against damage when agent logic fails. Within SAP Business AI Platform, OpenShell is the runtime security layer for all SAP AI agents, including custom agents built in Joule Studio. The same week, at ServiceNow Knowledge 2026, NVIDIA and ServiceNow extended their collaboration to deliver governed autonomous agents to enterprises, from employee desktops to AI factories.

The Read

This is the boring story that decides whether agentic AI ships into Fortune 500 ERP this fiscal year. The agent-in-ERP problem has never been a capability problem — it's been a blast-radius problem: nobody wanted to be the CIO who let an autonomous agent post journal entries against a live general ledger. An agent that can touch systems of record, cross application boundaries and operate without review at every step needs boundaries, policy enforcement and an audit trail before it can become part of production work — and until last month, "boundaries" meant a human reviewer between every agent action and every transaction. OpenShell-style sandboxing changes the procurement conversation from "should we deploy agents" to "which containment runtime do we standardize on" — which is exactly the question Microsoft Agent 365, AWS Bedrock, and Google Vertex are all racing to answer. NVIDIA quietly becoming the neutral runtime layer across SAP, ServiceNow, and the hyperscalers is the move worth tracking.

Do This Week

Add agent blast-radius to your next ERP change-control meeting as a standing agenda item. Specifically: for any SAP, Workday, NetSuite, or ServiceNow change request your firm is sponsoring this quarter that includes the word "agent," "Joule," or "Project Arc," require the change-owner to name the containment runtime, the rollback procedure, and the financial limit on a single agent action before the change advances. If they can't answer all three, the agent is in pilot, not production — regardless of what the vendor slide says.

For Consulting & Enterprise