# Red Hat 日跟踪 · 2026-09-29
> 日期：2026-09-29（Asia/Shanghai，周二）。原料：archive/2026-09-29/redhat/。上一日成功日跟踪 2026-09-28（周一；周末 09-26/27 无早报）。抓取全库：Saved 265 / skipped 29 / errors 40；blocked：blocksandfiles.com / docs.redhat.com / e.huawei.com / support.huawei.com / www.nextplatform.com / www.reddit.com / www.theregister.com。

## 摘要
- **新稿 · Why Red Hat is building secure agent onboarding**（厂商博客）：主张将安全编入 Red Hat AI，开源 **OpenShell** 作 secure agent runtime，并称其为 **NVIDIA Open Agent Safety Platform** 一部分；政策引擎 / 沙箱 / 网关；凭证在边界注入；人审批准策略变更；在 Podman 与 OpenShift 上验证——**厂商战略/工程博客**；OpenShell **仍勿写成 GA**（此前 DP/开源项目叙事）。
- **新稿 · Securing AI agents requires securing the systems around them**（厂商博客）：defense-in-depth（身份/工具/沙箱/网络/AgentOps）；OpenShell + BlueField DPU 硬件隔离；asago 社区政策→控制；Lightwell 供应链——**平台安全叙事，非 Virt 专稿**。
- **续档（09-28 首见，今日不升格）**：RHEL 10 STIG V1R2；Friday Five（Lightwell / Supermicro×Portworx Edge AI）；航空租赁 Agent。
- **续档**：AAP 安全风险自动化；Everpure on ARO；OpenShift adoption playbook；智能迁移工厂（昨日 archive 侧部分 txt 轮换，**不升格**）；ROS2；RHCP 征集。
- VR MQ Leaders 媒体转述续档；**本地无 Gartner PDF**。 **docs.redhat.com 深链历史性 Access Denied 风险仍在**。

## 原文摘录

### [Why Red Hat is building secure agent onboarding](https://www.redhat.com/en/blog/why-red-hat-is-building-secure-agent-onboarding) · 新稿
- 归档：`redhat/why-red-hat-is-building-secure-agent-onboarding-e125232b.txt`
- URL：https://www.redhat.com/en/blog/why-red-hat-is-building-secure-agent-onboarding
> … encoding into Red Hat AI with OpenShell — an open source project and a secure agent runtime also part of the NVIDIA Open Agent Safety Platform launched today.（**厂商博客；OpenShell 开源+运行时，勿写 GA**）
> OpenShell… agent sandboxes… A policy engine evaluates filesystem, network, and process access. A gateway checks every action… When an agent hits a constraint… propose a policy change. A human keeps the approval.（**政策引擎/沙箱/网关；人审**）
> … Landlock, seccomp, user and network namespace isolation, and L7 inspection.… Credentials live outside the agent's workload and are injected only at the network boundary.（**厂商产品主张**）
> … validated OpenShell's enforcement layer… on both Podman and Red Hat OpenShift.… NVIDIA's Secure Agent Workspace reference design.（**参考架构/验证叙事**）

### [Securing AI agents requires securing the systems around them](https://www.redhat.com/en/blog/securing-ai-agents-requires-securing-systems-around-them) · 新稿
- 归档：`redhat/securing-ai-agents-requires-securing-the-systems-around-them-79bd2c93.txt`
- URL：https://www.redhat.com/en/blog/securing-ai-agents-requires-securing-systems-around-them
> … control the agent's identity, permissions, access to tools and data, runtime environment, network connections and the infrastructure…（**defense-in-depth 主张**）
> Observability and AgentOps… The practical approach is defense in depth…（**AgentOps**）
> … asago open source community… translate AI governance policies into… technical controls… Agent runtimes such as OpenShell are one potential enforcement point…（**asago + OpenShell**）
> … NVIDIA Open Agent Safety Platform.… OpenShell… NVIDIA BlueField… hardware-isolated…（**硬件隔离旁注；厂商/伙伴叙事**）

### [Red Hat Enterprise Linux 10 STIG automation now matches DISA STIG V1R2](https://www.redhat.com/en/blog/red-hat-enterprise-linux-10-stig-automation-now-matches-disa-stig-v1r2) · 续档（09-28 NEW）
- 归档：`redhat/red-hat-enterprise-linux-10-stig-automation-now-matches-disa-stig-v1r2-fe6896e9.txt`
> （RHEL 10 STIG V1R2 续档；**今日不升格**；≠OCP）

### [Friday Five — September 25, 2026](https://www.redhat.com/en/blog/friday-five-september-25-2026-red-hat) · 续档（09-28 NEW）
- 归档：`redhat/friday-five-september-25-2026-red-hat-6bc45e7e.txt`
> （Lightwell / Edge AI Appliance 指针续档；**今日不升格**）

### [How to manage aircraft leases with AI agents](https://www.redhat.com/en/blog/how-manage-aircraft-leases-ai-agents) · 续档
- 归档：`redhat/how-to-manage-aircraft-leases-with-ai-agents-d18fc10a.txt`
> （航空租赁 Agent 续档）

### [Automate security risk management across enterprise IT operations](https://www.redhat.com/en/blog/automate-security-risk-management-across-enterprise-it-operations) · 续档
- 归档：`redhat/automate-security-risk-management-across-enterprise-it-operations-7a0ebf7c.txt`
> （AAP 安全自动化续档）

### [Unify VMs and containers with Everpure Cloud on ARO](https://www.redhat.com/en/blog/unify-vms-and-containers-everpure-cloud-azure-red-hat-openshift) · 续档
- 归档：`redhat/unify-vms-and-containers-with-everpure-cloud-on-azure-red-hat-openshif-360b8f76.txt`
> （Everpure on ARO 续档）

### [The playbook behind Red Hat's most successful OpenShift deployments](https://www.redhat.com/en/blog/playbook-behind-red-hats-most-successful-openshift-deployments) · 续档
- 归档：`redhat/the-playbook-behind-red-hat-s-most-successful-openshift-deployments-73aadfe2.txt`
> （adoption playbook 续档）

## 对基础档案的影响
- **最近动态追加**：OpenShell 安全 agent onboarding（开源 runtime + NVIDIA Open Agent Safety Platform；政策/沙箱/网关；人审）；agent 系统纵深防御博客（身份/工具/沙箱/网络/AgentOps + BlueField）。**OpenShell 勿写成 GA**。
- 09-28 STIG / Friday Five / aircraft 改为续档指针；AAP / ARO / playbook / 迁移工厂维持续档。