AI 安全
Red Hat AI 3.5 Brings OpenShell into OpenShift to Constrain Agent Side Effects with Kernel-Level Policies
OpenShift AI 3.5 integrates OpenShell as a Developer Preview, using Landlock, seccomp, network namespaces, and L4/L7 policies to restrict agent access. This means file, system-call, and network side effects following prompt injection no longer depend solely on model guardrails, although the default compatibility mode and preview status may still leave gaps.