# Agent 业务承载 · 日跟踪 · 2026-10-08

> 日期：2026-10-08（Asia/Shanghai，周四）。专题正文：`intel/topics/agent-hosting.md`。原料：`/workspace/intel/archive/2026-10-08/`（窗口 10-07 早报后→10-08 早）；对照 2026-10-07 日跟踪。抓取：Saved 276 / skipped 27 / errors 44；blocked_hosts：community.hpe.com、docs.redhat.com、e.huawei.com、support.huawei.com、www.reddit.com、www.sangfor.com（**blocksandfiles.com / www.nextplatform.com 本日恢复**；theregister 仅首页标题壳）。全库新增 URL 26 个。

## 摘要
- **中 NEW（续档深化）· NVIDIA Open Agent Safety Platform（NP 09-30 稿首次入库）：** OpenShell 内核级沙箱（可用于 Intel/AMD）+ Vera CPU 执行策略 + **Sentry on BlueField-4** + DOCA gateway Agent 身份/授权；支持方含 Anthropic、Mistral、SpaceXAI 等，"Notably absent is OpenAI"；文述 Agent 逃逸事件"tens of thousands range"为**媒体转述，未核**。
- 轻：Dell Knowledge Agents（2027 H1）；RH IdeaBot 内部 Agent；VMware 平台工程博称 PE 2.0 消费者包括「non-human consumers (AI agents) calling infrastructure APIs」；奇客：苹果收紧 Full Disk Access（AI 智能体风险）。
- 续档：OpenShell 0.1.0 / OpenClaw Enterprise（勿 GA）；Decisions API / LASST 诉讼（媒体摘要）。

## 原文摘录

### NextPlatform · Nvidia Wraps Security Layer Around Agentic AI To Stop Rogue Behavior（09-30，本日首次入库；媒体报道）
- 归档：`industry/nvidia-wraps-security-layer-around-agentic-ai-to-stop-rogue-behavior-8db6b2b6.txt`
- URL：https://www.nextplatform.com/ai/2026/09/30/nvidia-wraps-security-layer-around-agentic-ai-to-stop-rogue-behavior/5300098

> First is OpenShell, an open source runtime first announced in March that is used to run agents in sandboxed environments with isolation at the kernel level.  
> OpenShell also can be used with chips from Intel and AMD.  
> "Sentry provides in-silicon security enforcement, meaning that if an AI agent attempts to move outside its software boundary, Sentry quarantines and stops it in milliseconds,"  
> Notably absent is OpenAI, which clearly needs to rein in its models.  

### VMware · The Cloud Admin’s Path to Platform Engineering（10-07；厂商观点/指南）
- 归档：`vmware/the-cloud-admin-s-path-to-platform-engineering-1f1f9e00.txt`
- URL：https://blogs.vmware.com/cloud-foundation/2026/10/07/the-cloud-admins-path-to-platform-engineering/

> Platform engineering is now the default operating model: the 2025 DORA report found that roughly 90% of organizations have an internal platform and about three-quarters have a dedicated platform team.  
> VCF 9.1 widens this door further: the vSphere Supervisor now supports non-disruptive import of existing vSphere VMs into a vSphere Namespace for VM Service (KubeVM) to manage, with batching and rollback.