{
  "id": 562857,
  "title": "IBM and Red Hat Expand Lightwell to Strengthen Trust and Governance for AI-Era Open Source",
  "url": "https://urgent.news/2026/08/11/ibm-and-red-hat-expand-lightwell-to-strengthen-trust-and-governance",
  "topic": "ai",
  "section": "AI",
  "published": "2026-08-11T12:00:00.000Z",
  "source": {
    "name": "InfoQ",
    "slug": "infoq",
    "url": "https://www.infoq.com/news/2026/08/lightwell-ai-open-source/"
  },
  "original_language": "en",
  "account": "IBM and Red Hat are enhancing Lightwell to bolster trust and governance in the AI-driven open-source landscape. The expansion introduces commercial features to simplify software signing, provenance, artifact verification, and policy enforcement, enabling companies to ensure both human and AI-generated software are trustworthy throughout the software delivery lifecycle. This reflects a broader shift in software security, where the focus has moved from merely creating code rapidly to proving its origin, construction, modifications, and compliance with security policies prior to production. Lightwell, rooted in established security standards like Sigstore, in-toto, SLSA, and SBOM, aims to merge these functionalities into a unified platform. This integration allows organizations to verify every phase of the software delivery process, crucial as AI-assisted development accelerates software changes entering enterprise pipelines. The new offerings streamline cryptographic provenance and continuous verification, enabling organizations to trace software back to verified sources and validate it against organizational policies. This shift signifies a move away from solely relying on code reviews or vulnerability scanning toward a model where trust is an inherent attribute of software from development through deployment. IBM and Red Hat's move aligns with a larger industry trend toward establishing verifiable software supply chains, with other tech giants like GitHub, Google, Microsoft, and the CNCF also contributing to this cause. The overarching goal is to ensure software is not only functional but also transparent, accountable, and resistant to tampering, acknowledging that trust must extend to AI systems participating in software creation.",
  "summary": "IBM and Red Hat have announced an expansion of Lightwell, introducing new commercial offerings designed to help organizations establish trusted, verifiable software supply chains for the age of AI-assisted software development. By Craig Risi",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}