The Passport Isn't Shipped Yet: What ServiceNow Arc's General Availability Means for Enterprise AI Governance

On October 21, 2026, ServiceNow made a personal AI agent called Arc generally available at NVIDIA GTC in Berlin. Arc works through your email, Teams and ServiceNow workflows, and it keeps going on a task for minutes or days. The same day, NVIDIA unveiled a full-stack reference architecture to contain and monitor agents like it.

Read the announcement closely and you’ll spot a gap. The agent is shipping today. The strongest part of its safety story, a per-agent “AI Passport” that can be revoked in about a second, is promised for a future release.

This post covers what Arc is, how the OpenShell and Sentry stack is meant to govern it, what has and hasn’t actually shipped, and what a technology leader should do before letting a long-running agent loose on employee desktops.

What ServiceNow Actually Shipped

Arc began life in May as Project Arc, announced at Knowledge 2026 as an early-preview desktop agent. Five months later it is generally available as part of ServiceNow EmployeeWorks, and it is included at no additional cost with the Foundation, Advanced and Prime SKUs.

How it works

According to ServiceNow, Arc takes a goal, plans the work, executes across enterprise systems, checks its own output and keeps going until the task is done. It surfaces action items from an employee’s backlog, inbox, meetings and conversations. It builds memory and skills over time, and it can build missing integrations on the fly, running them inside the same sandbox boundary.

It also splits its inference. Arc uses local models on NVIDIA RTX Spark hardware for everyday tasks and frontier models for demanding ones, which ServiceNow says lowers inference costs and keeps more data on the device.

What’s live and what isn’t

Mac support is live, and Windows support is expected within weeks. Most importantly, coverage of the launch notes that the AI Passport authority layer is slated for a future release and is not yet enforced. The capability claims also come from launch announcements, with no independent testing of performance or reliability.

The Containment Stack: OpenShell, Sentry and the Passport

Arc’s governance depends on two pieces of NVIDIA infrastructure and one ServiceNow concept.

OpenShell: the software boundary

Every Arc action is meant to run inside NVIDIA OpenShell, a sandboxed runtime with policy-based controls. In the May announcement, ServiceNow said its AI Control Tower logs the files an agent reads, the commands it executes and the APIs it calls. At GA, ServiceNow says runtime policy covers which systems, APIs and data the agent can reach.

Sentry: the hardware watchdog

On October 21, NVIDIA launched the OpenShell Reference Architecture, extending the runtime into a full stack. Its BlueField-4 DPUs run NVIDIA Sentry, a security framework that NVIDIA says monitors agent behavior continuously and enforces policy in silicon. If an agent leaves its software boundary, NVIDIA says Sentry quarantines it within milliseconds. The company says the architecture is available now, with partners including Anthropic, AWS, Google Cloud, Microsoft, OpenAI, SAP and ServiceNow.

This builds on the idea we covered in Putting Agents in a Box: a software sandbox plus a watchdog that doesn’t depend on the software it watches.

AI Passport: the missing piece

ServiceNow describes the AI Passport as an attested record that the Control Tower issues to each AI agent, MCP server and other governed AI asset. It carries business context such as decision logic and vendor risk, and it defines which tools and actions each agent may use.

The pitch is action-level control. You could block a single write to a production system while the agent keeps doing other work. ServiceNow says revocation propagates across the software and hardware layers in about one second, and only the revoked agent’s traffic stops. That’s a compelling design. It is also the part that hasn’t shipped.

Why the Gap Between GA and Enforcement Matters

None of this means ServiceNow is being deceptive. The press release says plainly that AI Passport is coming in a future release. The issue is how the announcement will be read inside your company.

”Governed by IT” is not the same as “fully governed today”

ServiceNow’s quote frames Arc as “governable by IT through the Super Intelligence Control Tower and NVIDIA OpenShell.” Today that governance is the sandbox and policy layer. The fine-grained, revocable, hardware-backed layer is the roadmap. A buyer who reads the headline and assumes both are live will under-scope their own controls.

Agents are now treated as insiders

The timing fits a wider shift. On October 19, Microsoft argued that enterprises should stop implicitly trusting their internal agents, framing them as “agentic insiders” that need continuous monitoring. We unpacked the earlier version of that argument in The Agentic Insider. Arc is exactly the kind of agent that framing is about: it reads your inbox, acts across systems and runs for days.

Long-running agents change the oversight model

A chatbot answers and stops. An agent that works for days accumulates context, credentials and opportunities to go wrong. The risks we described in Always-On AI Agents apply directly. The longer the run, the more a single missing control costs.

What Technology Leaders Should Do Now

Pilot with a narrow blast radius

Start Arc with a small group, on non-production systems where possible, and with read-heavy permissions. Only widen access after you’ve reviewed the Control Tower logs of what the agent actually did.

Ask vendors for a shipped-versus-roadmap matrix

For any agent platform, list each governance control and mark it shipped, in preview or planned. Ask for the date and the version. If the answer for revocation is “planned,” build a compensating control, such as manually scoped credentials that you can rotate.

Treat identity as the control surface

An agent with its own identity can be audited and revoked. One without can’t. Our look at why non-human identity is the next enterprise security crisis explains why inventory comes first. Make sure each Arc instance maps to a named owner and a documented permission set.

Plan for the hardware dependency

Sentry-level enforcement runs on BlueField DPUs, and local inference leans on RTX Spark systems. If your fleet is mostly standard laptops and general-purpose servers, find out which protections you’ll actually get and which require new hardware.

Test the failure path, not just the happy path

Before wide rollout, rehearse what happens when an agent misbehaves. Who gets alerted, who can stop it and how quickly? Vendor claims of millisecond quarantine and one-second revocation are vendor claims until you’ve seen them hold in your environment.

Conclusion

Arc’s general availability is a real milestone: a major enterprise vendor is shipping a long-running personal agent with a published governance architecture, backed by NVIDIA’s open runtime and hardware enforcement. It is also a reminder that “available now” and “fully governed” can be different dates.

The practical takeaways:

• Adopt in stages, starting with a small pilot and limited permissions.
• Demand a shipped-versus-roadmap list for every governance control.
• Give every agent an identity, an owner and a revocation plan.
• Verify the vendor’s stated detection and revocation speeds yourself.
• Revisit your rollout when the AI Passport actually ships.

If you’re deciding how to deploy agents safely across your organization, Promact’s AI team can help you design the guardrails before the agents arrive.

Frequently Asked Questions

What is ServiceNow Arc?

Arc is a personal AI agent that ServiceNow made generally available on October 21, 2026. It plans and executes multi-step work across ServiceNow workflows, email, Teams and other productivity tools, running for minutes or days.

Does Arc cost extra?

According to ServiceNow, Arc is included at no additional cost with its Foundation, Advanced and Prime SKUs as part of EmployeeWorks.

What is the AI Passport?

It is an attested record issued by ServiceNow’s Control Tower to each governed agent or MCP server, defining which tools and actions it may use and allowing revocation. ServiceNow says it is expected in a future release and isn’t enforced yet.

What does NVIDIA’s OpenShell Reference Architecture add?

It extends the OpenShell sandbox runtime into a full stack. NVIDIA says BlueField-4 DPUs running Sentry monitor agents continuously and can quarantine one that leaves its software boundary within milliseconds.

Can Arc run on Windows?

Mac support is live. ServiceNow says Windows support is expected within weeks of the announcement.

Should enterprises wait for the AI Passport before adopting Arc?

Not necessarily, but they should limit the pilot’s scope and permissions until the finer-grained controls ship, and verify the vendor’s performance claims independently.

Sources

• ServiceNow Newsroom - Press release announcing Arc general availability and AI Passport
• NVIDIA Newsroom - OpenShell Reference Architecture announcement from GTC Berlin
• Business Wire - May 2026 Project Arc announcement from Knowledge 2026
• ServiceNow Newsroom (May 2026) - Details on OpenShell sandboxing and Control Tower logging
• Let’s Data Science - Secondary coverage noting AI Passport is not yet enforced
• SiliconANGLE - Coverage of Microsoft’s “agentic insiders” guidance