IBM and CoreWeave engineer agent workload isolation controls

IBM Research and CoreWeave have co-designed infrastructure controls to support agent workloads, moving beyond model training to running code and testing agents. IBM built a large H100 cluster with CoreWeave and collaborated on identity management and workload isolation, including CoreWeave Sandboxes for isolated execution. IBM senior technical staff member Brian Belgodere described the challenge as a full supply chain problem spanning hardware, firmware, kernel levels, data provenance, and agent images. IBM measures security control performance impacts against benchmarks to inform tradeoffs with security teams.