live wire
▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸SECURITY · Red Hat’s first Security Signals report shifts focus from CVE counts to risk paths (Oct. 15)Red Hat▸PLATFORM · IBM adds non-destructive FlexVolume-to-CSI migration tool for OpenShift object storageIBM Cloud▸vLLM tests agent-built Kimi K3 decode path at up to 1.9× speedup; PR remains openvLLM▸AI · LeaderWorkerSet 1.0 changes rollout defaults for disaggregated AI workloadsKubernetes SIGs▸SECURITY · Red Hat flags active exploitation of kernel flaw affecting OpenShift CoreOS; no fix listedRed Hat Product Security▸AI · Red Hat sets Dec. 9 showcase for AI 3.6 agent governance and model servicesRed Hat▸vLLM 0.32.0 drops Python 3.10, restricts CORS defaults and adds security fixesvLLM▸SECURITY · Red Hat tracks Moderate Hono auth bypass across OpenShift AI, Dev Spaces and AnsibleRed Hat Product Security▸SECURITY · Red Hat Hardened Images fixes Moderate libpng denial-of-service flawRed Hat▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸SECURITY · Red Hat’s first Security Signals report shifts focus from CVE counts to risk paths (Oct. 15)Red Hat▸PLATFORM · IBM adds non-destructive FlexVolume-to-CSI migration tool for OpenShift object storageIBM Cloud▸vLLM tests agent-built Kimi K3 decode path at up to 1.9× speedup; PR remains openvLLM▸AI · LeaderWorkerSet 1.0 changes rollout defaults for disaggregated AI workloadsKubernetes SIGs▸SECURITY · Red Hat flags active exploitation of kernel flaw affecting OpenShift CoreOS; no fix listedRed Hat Product Security▸AI · Red Hat sets Dec. 9 showcase for AI 3.6 agent governance and model servicesRed Hat▸vLLM 0.32.0 drops Python 3.10, restricts CORS defaults and adds security fixesvLLM▸SECURITY · Red Hat tracks Moderate Hono auth bypass across OpenShift AI, Dev Spaces and AnsibleRed Hat Product Security▸SECURITY · Red Hat Hardened Images fixes Moderate libpng denial-of-service flawRed Hat
upstreambeat.ai
newsAI

Red Hat and NVIDIA put agent controls outside the agent’s reach

OpenShell and DOCA are coming to Red Hat AI Factory, while NVIDIA’s BlueField-based Sentry design adds an independent enforcement plane for agent workloads.

By The News Desk· Sep 28, 2026the quick take — two AI hosts go live when you do

NVIDIA has launched an Open Agent Safety Platform that combines an open-source runtime boundary with a hardware-isolated monitoring design, and Red Hat says it is integrating parts of that stack into Red Hat AI Factory with NVIDIA. The announcement moves agent security beyond model guardrails toward controls that the agent workload cannot directly change or bypass. (Red Hat; NVIDIA)

What changed

The platform has two main pieces. OpenShell is a broadly available secure runtime intended to trace agent actions and enforce policies while agents run. NVIDIA says the open-source software targets its Vera CPUs but can be extended to third-party compute platforms, including Arm and Intel systems. (NVIDIA)

The second piece is NVIDIA Sentry, a reference design for an out-of-band watchdog on BlueField-4 data processing units. NVIDIA says Sentry uses DOCA software to inspect requests and responses, verify agent identity, produce attested telemetry and enforce access policies for data, tools, APIs and services from an isolated trust domain. NVIDIA describes Sentry as able to quarantine an agent that crosses its boundary in milliseconds, but its release also cautions that many described products and features remain subject to availability. (NVIDIA)

Red Hat’s contribution is the enterprise platform around those controls. The company says it runs OpenShell and DOCA on Red Hat AI Factory with NVIDIA, the combined stack built from Red Hat AI, OpenShift AI, OpenShift, RHEL and NVIDIA infrastructure. Red Hat presents BlueField as an additional enforcement boundary alongside identity, authorization, workload isolation, network policy, observability and software-supply-chain controls—not as a complete answer by itself. (Red Hat; NVIDIA)

Who it affects

The immediate audience is platform and security teams preparing to let autonomous agents call enterprise APIs, use credentials, reach files and invoke tools. Red Hat’s architecture assumes those agents can behave unexpectedly and therefore treats the model as an untrusted participant rather than the primary security boundary. (Red Hat)

That design matters most for agents with meaningful authority. Runtime sandboxing can constrain processes, OpenShift can supply workload and network isolation, and a DPU-based monitor can remain outside the host environment where the agent executes. The layers address different failure modes; none replaces the others. (Red Hat)

What to do

Teams evaluating the stack should separate what is available now from the reference architecture. OpenShell is available through NVIDIA’s developer resources and GitHub, while Sentry is described as a BlueField-4 reference design. A practical evaluation should test whether policies survive a compromised or misbehaving agent, whether tool and network permissions are independently enforced, and whether audit data crosses a trust boundary the agent cannot alter. (NVIDIA)

The strategic change is the placement of control. Instead of asking only whether an agent follows instructions, Red Hat and NVIDIA are asking which identity, policy and monitoring functions must remain outside the agent’s reach. (Red Hat)

sources

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.

    more from the desk