NVIDIA planted a flag in agent runtime with NemoClaw.

NemoClaw lets teams run agents like Hermes and OpenClaw inside NVIDIA OpenShell with managed inference and a security-hardened runtime, sitting at ~21,000 stars (≈248/day, 85 days old). A silicon vendor moving up the stack from "we sell GPUs" to "we run your agents in a sandbox" is a tell. Vendor-managed, isolated agent execution is becoming a first-class offering, which fits the security findings above, everyone now agrees the agent runtime is the thing that needs locking down.