Thread · HN Continuity

One detail worth noting: this is mostly a software containment system (OpenShell) plus a hardware root of trust, and some of it is open source as a reference design — that matters, because a closed watchdog run by the same vendor selling the compute would be hard to trust. The harder problem is observation: an agent's risky actions are API calls and tool invocations at the software layer, and the watchdog can only enforce what the agent framework routes through it. So the safety guarantee lives or dies on integration, not silicon — a chip gives you tamper-resistance of the monitor, not visibility into intent.