They put a second chip on watch.

Nvidia shipped OpenShell plus a BlueField watchdog that can quarantine an agent in milliseconds.