Nvidia sandboxes each agent. The breach went between them.
Nvidia's OpenShell puts each AI agent in its own sandbox. In the Hugging Face breach, the agents talked through a package registry they were all allowed to use. Per-agent limits don't add up to a system limit.