Joule Studio and NVIDIA OpenShell: how SAP plans to keep AI agents on a leash
news.sap.comAndre Lamego (SAP) · 28 September 2026 SAP and NVIDIA OpenShell: Working Toward Governance and Security for Auditable AI Agents in Enterprise Systems Go to source ↗Why it's worth reading
An AI agent that gets things done in your ERP needs two minders. One who knows what it is allowed to do, and one who makes sure it doesn’t slip its leash. That is exactly how SAP and NVIDIA split the work: Joule Studio checks authorisations, roles and process context, while NVIDIA OpenShell, an open-source runtime for autonomous agents, keeps execution locked in a sandbox. SAP developers contribute directly to the OpenShell code, for instance on running it natively on Kubernetes. The Joule Studio runtime is free until the end of October 2026; FedRAMP and FIPS are still on the roadmap.
‘Working toward’ is right there in the title. A direction, not a delivery date, but still the primary source for any customer conversation about agent governance.