Red Hat, NVIDIA, IBM back project turning AI policy into code
| Source: AI News (ainews.com)
Tags: Red Hat, asago, AI governance, EU AI Act, NIST, Kubernetes, compliance, Nvidia, IBM
Red Hat, backed by Nvidia and IBM, open-sources 'asago' — a workflow that automatically converts AI governance policy documents into deployment-ready Kubernetes controls with a full audit trail, targeting EU AI Act compliance timelines cut from months to days.
Details
Red Hat has launched asago (Apache 2.0), an open-source project that turns AI governance policy into automated, auditable deployment controls. The workflow runs in four stages: policy ingestion and risk mapping (against NIST AI RMF, OWASP LLM Top 10, and EU AI Act via IBM's AI Risk Atlas), automated risk assessment with use-case-specific scenario generation, guardrail recommendation, and deployment configuration for hybrid cloud and Kubernetes environments.\n\nThe core selling point is traceability: each policy clause ties to a specific test, each test ties to a runtime control, and a reviewer can trace any active control in a live deployment back to the policy line that justified it. Red Hat frames this as converting compliance from a one-time certification exercise into ongoing continuous governance.\n\nThe project builds on Red Hat and Nvidia's collaboration inside the Open Secure AI Alliance, and is currently in formation phase with the GitHub repository open for contributions from developers, academic researchers, and enterprise early adopters. Red Hat's stated goal — cutting deployment timelines from months to days — is aspirational; real-world validation against complex enterprise AI policies is still pending.