Red Hat leads open-source project to automate AI governance

IBM Corp.’s Red Hat subsidiary today announced the formation of asago, an open-source community project intended to turn artificial intelligence governance policies into operational controls that can be deployed with AI systems.

Short for AI Safety and Governance Orchestration, asago is intended to connect the work that is now often divided among compliance teams, data scientists and infrastructure administrators. The project aims to automate the process of interpreting policies, assessing risks, recommending safeguards and producing deployment configurations while preserving an audit trail linking each control to the policy requirement behind it.

Red Hat said the initiative is needed as enterprises move beyond experimental generative AI projects toward systems and autonomous agents that can remain in production for long periods. That shift makes it harder to reconcile broad governance requirements with the specific tests, guardrails and infrastructure configurations engineers need.

Asago will use a standardized platform and workflow spanning four stages. It will first interpret an organization’s governance policies and map their requirements to frameworks and standards such as the National Institute of Standards and Technology’s AI Risk Management Framework, the Open Worldwide Application Security Project’s Top 10 for Large Language Model Applications and the European Union’s AI Act. The mapping will use the IBM AI Risk Atlas.