IBM 与 Red Hat 扩展 Lightwell 以加强 AI 时代开源软件信任与治理
原标题：IBM and Red Hat Expand Lightwell to Strengthen Trust and Governance for AI-Era Open Source
AI 摘要
IBM 和 Red Hat 扩展了开源项目 Lightwell，推出新的商业产品，以帮助企业在 AI 辅助软件开发时代建立可信、可验证的软件供应链。这些产品整合了软件签名、来源验证、工件验证和政策执行，确保人工和 AI 生成的软件在整个交付生命周期中可信。此举反映了行业对加密来源和持续验证的日益关注，以应对 AI 生成代码和自动化工作流带来的安全挑战。
正文节选
IBM and Red Hat have announced an expansion of Lightwell, introducing new commercial offerings designed to help organizations establish trusted, verifiable software supply chains for the age of AI-assisted software development. Building on the open-source Lightwell project, the new offerings aim to simplify software signing, provenance, artifact verification, and policy enforcement, enabling enterprises to ensure that both human- and AI-generated software can be trusted throughout the software d