Jensen Huang, he's right here on set with us, of course, the CEO of Nvidia. And Jensen, welcome. It is great to see you this morning.
So, this is an advancement in something that we've kind of seen the national discussion take place around AI and AI safety. And in this discussion, there have been those who have been painted as doomers who think that the end of the world is going to come from this. And then there have been those who have painted you as the guy who doesn't want to see anything happen on any level. I don't think that's a fair and accurate depiction of where you stand with things. Why don't
I want to see a lot of things happen on a lot of levels.
So, why don't we talk about where we stand? And then we're going to jump into what this is.
First of all, as you know, we're going through a major platform shift. AI is incredible technology, has the potential to do incredible good, but we also have to make sure that the technology is developed and deployed safely so that the public has confidence in applying this technology. The single most important thing we could possibly do is to build it in such a way that it is so safe that everybody could use it in every single industry so that we could transform every industry. And so that's the hard work that we have to do. These agentic systems are obviously agentic, meaning they operate by themselves. It's kind of, you know, it's like a self-driving car. And so in order for you to deliver that agentic system in a safe way, you have to make sure that the sandbox around it, the force field, the playpen, you know, if you will, all of those systems are designed in a way that keeps the agent with minimal rights. Whatever rights it has, it needs in order to do its job. No more rights than that. And that it can't do anything that it's not supposed to. But and also you have to monitor it.
So, but the problems that we've seen to this point where OpenAI, Anthropic, Google, and others have had agents that have escaped and have gotten out and done mischievous things, maybe illegal things. The problems we've seen to this point, you think is simply an engineering problem and a fault of those companies maybe not putting in the right restrictions?
Well, I think the answer is we hope it's an engineering problem. I believe it's an engineering problem. I know it's an engineering problem. And we all need to hope that it's an engineering problem. If it's not an engineering problem, it's not solvable.
And so the fact that all of these companies still are advancing the state of the art is because they also believe it's solvable. These are some of the brightest engineers in the world. I work with, you know, all of them and these are... This is a technically solvable problem. And so the way to think about that is if you look at, go back to the days of the internet. You access a website, it downloads application, maybe it's Java application. All of a sudden, this application comes into your PC, has access to files and resources and maybe the applications and tools and it gets onto your network. Well, in the beginning, we had all kinds of viruses. But we realized that the web browser itself has to be a containment system. The web browser has to provide that application with minimal rights. Whatever, only the rights it needs in order to do its job. And it has access to basically access to nothing unless the browser gives it access. Essentially, what we're doing here, we're creating basically the modern browser. It's a browser for agents.
Somewhere inside the culture of AI researchers, for years now, has been this anxiety that somehow these models have to be clever. And they have to be able to get outside of their walls because they're so clever. Right? I mean, where do you think that... I mean, that's like built into the research AI researcher culture. And so at one level, I think while there's some people who believe it's an engineering problem, there are these others, even inside these companies, that believe it's unsolvable.
I don't think so. I don't think he's exactly wrong. First of all, you want it to be super clever so it could perform tasks and do things. But the way you think about that is when you deploy an agent, no matter how smart, the first thing you do is you take away all of its rights. Job number one is take away all of its rights. And then you provision, you give it access to files, data, tools, access to the network, or even internet access, only if it needs it. You don't just... You don't put an agent into an environment, into your company and give it access to everything. We don't give that to people. We don't give that to any level of executive. In fact, everybody has a badge, everybody has file access, everybody has access to tools, and only the things that they need in order to do their job. And so, we have to apply the same philosophy. Now, the question is, how do we develop the technology to provision that policy, provision that philosophy? And that's what we created. That's what OpenShell is. It's really important technology. It has the support of some 100 companies. You didn't mention IBM and Red Hat and Microsoft and SpaceX. And so, all of these companies, they recognize the importance of basically this force field that you create around the agent. And very importantly, it's provisioning rights and responsibilities, you know, and access.
It's an open-source program.
Which is very, very important. And the reason for that is this. We want the sandbox to be visible to the whole world so that if there are any vulnerabilities, somebody will find it. You got other... Look at these 100 companies, there's actually a lot more companies. There's only... we can list 100 companies. You know, the industry will all be jumping in looking at any possible vulnerabilities and patch it up.
