Is this finally the year AI agents graduate from personal desktop curiosities to mission-critical enterprise systems? While developers have embraced autonomous agents to write code, conduct research, and automate complex workflows on local machines, transitioning those dynamic workloads to production environments introduces an entirely new class of architectural and security dilemmas. Traditional enterprise platforms thrive on deterministic code, GitOps pipelines, and static security policies—assumptions that break down when an agent begins writing and executing code dynamically at runtime.

In this episode of Technically Speaking, Red Hat CTO Chris Wright sits down with Derek Carr, Senior Distinguished Engineer at Red Hat and longtime Kubernetes pioneer, to demystify the internal anatomy of AI agents and chart the path to enterprise readiness. Using a tangible physical analogy—mapping the LLM to the brain, tooling to the hands, context to short- and long-term memory, and harnesses to the nervous system—Derek breaks down why treating an agent as just another containerized workload falls short. Moving an agent from a laptop into a centralized cluster exposes critical questions around enterprise identity, state retention, multi-user concurrency, and credential exposure.

The conversation explores how open source communities are answering these challenges by establishing strict trust boundaries and sandboxing execution environments. Derek details the emergence of OpenShell—an agent execution runtime built to decouple sensitive credentials from untrusted actions through granular, deny-by-default runtime policies. Chris and Derek also examine the co-evolution of projects like OpenClaw and the newly announced OpenClaw Enterprise architecture, demonstrating how collaborative open source governance is turning early viral experiments into hardened, auditable, and multi-tenant enterprise platforms.

Tune in to discover how sandboxing, runtime policy enforcement, and defense-in-depth architecture are laying the groundwork to safely unlock autonomous AI agents across the enterprise.

Every CTO and CSO faces a daunting reality: while engineering teams write clean, audited code, modern applications rely on thousands of open source dependencies they didn't write. When a critical Common Vulnerabilities and Exposures (CVE) hits one of those deep dependencies, IT leaders are trapped between two bad choices: forcing an unvalidated framework upgrade that risks breaking production, or running vulnerable software in production.

In this episode of Technically Speaking, Red Hat CTO Chris Wright sits down with Mike McGrath, Vice President of Lightwell Engineering at Red Hat, to discuss how Red Hat is working to eliminate that choice entirely. Mike shares his journey from volunteering with the Fedora project in the 1990s to leading core platforms at Red Hat, before diving into the origin and mission of Project Lightwell, an initiative designed to industrialize vulnerability scanning and surgical remediation across the open source application ecosystem.

Together, Chris and Mike explore the "Mythos Moment" in AI-driven vulnerability discovery, the power and pitfalls of agentic Large Language Model (LLM) workflows, and why surgical patching is essential for maintaining enterprise runtime stability. They also highlight Red Hat’s human-centric commitment to contributing security fixes back to upstream open source communities responsibly, ensuring maintainers aren't overwhelmed with automated bug reports while making open source software safer for everyone.

Tune in to discover how AI-powered automation, validated package pipelines, and surgical patch management are reshaping software supply chain security and giving enterprise leaders true peace of mind.