Giving agentic systems only two of three capabilities at once

Jensen Huang describes allowing agentic systems only two of three capabilities at a time: accessing sensitive information, executing code and communicating externally. He also describes applying enterprise access controls and connecting the systems to a policy engine.

Jensen Huang·Published Mar 23, 2026

Preview links work in this environment. The public card URL becomes available only after publication.

Behind the viewpoint

Translations are for reading; original excerpts remain the evidence.

Jensen Huang on AI agent safety, leadership and trust

Original excerpt

We give you two out of three rights. Agentic systems can access sensitive information, it can execute code, and it can communicate externally. We could keep things safe if we gave you two out of those three capabilities at any time, but not all three.

Context

They install super easy. It makes sure that it’s secure. So you eloquently explained how we have a long history of blockers that we thought were going to be blockers, and we overcame them. But now looking into the future, what do you think might be the blockers now that it’s clear that agents will be everywhere? So it’s obviously we’re going to need compute. So what is going to be the blocker for that scaling?

Open original · 37:03 View source page

Start time comes from the supplied transcript. Playback alignment is awaiting review.