Red Hat and NVIDIA expand AI agent security with OpenShell sandboxing, model access controls, and planned native integration across hybrid cloud environments.