# Red Hat 日跟踪 · 2026-10-28
> 日期：2026-10-28（Asia/Shanghai，周三）。窗口：2026-10-27（周二）早报之后 → 2026-10-28（周三）早。上一成功早报 **2026-10-27**。抓取全库：Saved 280 / skipped 29 / errors 43；blocked_hosts：community.hpe.com、docs.redhat.com、e.huawei.com、support.huawei.com、www.globenewswire.com、www.sangfor.com（**无** www.reddit.com；Reddit 本日有 txt/meta，但 SSL/timeout 空正文，**无可用帖**）。相对全部历史归档真正新增 URL **8** 条（industry 5、redhat 2、zstack 1）。 原料：archive/2026-10-28/redhat/。docs.redhat.com 仍 **host_blocked**。

## 摘要
- **中 NEW · Securing the enterprise software supply chain in the AI era：** EMEA **1400** CIO 调研（Censuswide，14 国）；**86.7%** 对 AI agent 治理自信，但完全数据可见仅 **39.6%**；**45.2%** 承认轻微盲区；仅 **32.9%** 对 OSS 供应链（含嵌套依赖）有完整持续视图——**厂商调研博**，非产品 GA。
- **中 NEW · AI agent security with policy-driven access control：** 引 CSA：**70%** 生产有 AI、**82%** 无实时可见、仅 **21%** 有 agent 清单、**65%** 已发生 agent 安全事件；倡议策略提取→授权规则生成→数据访问校验；提及 OpenShell / asago / MCP 为开源积木——**厂商博 + 引用第三方**；非版本 GA；**勿写 OpenShell 为 RH GA**。
- **无** OCP / Virt·OVE / OpenShift AI / OpenShell / ROSA·ARO / ACM·ACS / MicroShift **版本号首发或 GA**。
- **续档：** Enterprise AI data strategy / edge MLOps / Vulnpocalypse——本日无推翻。

## 原文摘录

### 1. Supply chain in the AI era
- 归档：`archive/2026-10-28/redhat/securing-the-enterprise-software-supply-chain-in-the-ai-era-498fcebc.txt`
- URL：https://www.redhat.com/en/blog/securing-enterprise-software-supply-chain-ai-era
- 口径：厂商调研博（Censuswide 1400 CIO）

> Red Hat surveyed 1,400 chief information officers (CIOs) across 14 EMEA countries… 86.7% of surveyed CIOs report feeling confident in their organization's ability to govern deployed AI agents… only 39.6% express complete confidence in their total data visibility… Nearly half (45.2%) acknowledge minor blind spots… Only 32.9% of EMEA CIOs maintain a complete, continuously updated view of their open source software supply chain…

### 2. AI agent security · policy-driven access control
- 归档：`archive/2026-10-28/redhat/ai-agent-security-with-policy-driven-access-control-9dd19184.txt`
- URL：https://www.redhat.com/en/blog/ai-agent-security-policy-driven-access-control
- 口径：厂商博 + 引用 Cloud Security Alliance；OpenShell 为叙事积木非 RH 产品 GA

> Recent research from the Cloud Security Alliance shows 70% of organizations now have AI components in production, yet 82% lack real-time visibility into AI runtime behavior. Furthermore, only 21% of organizations maintain a real-time inventory of their deployed AI agents… 65% of organizations have already experienced a security incident tied to agentic AI… OpenShell offers sandboxed execution… We're exploring how Red Hat OpenShift AI can surface policy-driven access controls…

## 对基础档案的影响
- **轻量更新** `profiles/redhat.md`「最近动态」：供应链 AI 时代调研 + agent 策略驱动访问控制博。