Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion AGENTS.md
Original file line number Diff line number Diff line change
Expand Up @@ -216,7 +216,7 @@ agentops-showcase/
│ ├── validate-demo-external-css.sh # Lint docs/demo HTML/JS for external CSS only
│ ├── validate-demo-ui.sh # CSS lint + demo unit tests (no cluster)
│ ├── export-readme-architecture.sh # Playwright PNG for README (v5/live.html step 0)
│ ├── export-readme-architecture-gif.sh # Playwright frame capture + ffmpeg GIF (hops 0–6 default)
│ ├── export-readme-architecture-gif.sh # Playwright frame capture + ffmpeg GIF (hops 0–22 default)
│ ├── demo-observability-proxy.py
│ ├── demo-enable-guardrails.sh # Live demo Change 2: NeMo inference path
│ ├── demo-disable-guardrails.sh # Reset to direct MaaS
Expand Down
7 changes: 4 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,9 +10,9 @@ This project demonstrates the **BYOA (Bring Your Own Agent)** approach from the

## Architecture

![AgentOps platform architecture](assets/overall-architecture.png)
![AgentOps platform architecture — full baseline flow](assets/overall-architecture.gif)

*Interactive map:* [v5/live.html](docs/demo/v5/live.html) step **Overall Demo** (`./scripts/demo-presenter-serve.sh`). Standalone reference: [`overall-demo-architecture.html`](docs/demo/overall-demo-architecture.html). Static PNG above: regenerate locally with `make export-architecture` after diagram edits.
*Interactive map:* [v5/live.html](https://davidseve.github.io/agentops-showcase/demo/v5/live.html#step-0) step **Overall Demo** (`./scripts/demo-presenter-serve.sh`). Standalone reference: [`overall-demo-architecture.html`](docs/demo/overall-demo-architecture.html).

## Platform Stack

Expand Down Expand Up @@ -95,7 +95,7 @@ make deploy-all && make validate
├── Makefile # Wrapper → deploy/Makefile (make demo, deploy-all, …)
├── AGENTS.md # AI agent context (for Cursor/Claude)
├── README.md # This file
├── assets/ # README diagrams (overall-architecture.png — see make export-architecture)
├── assets/ # README diagrams (overall-architecture.gif/.png — see make export-architecture-gif)
├── config/ # OpenClaw template + OpenShell sandbox policies
├── docs/ # Guides, ADRs, demo narrative, ROADMAP
├── deploy/ # Helm charts + deploy/Makefile
Expand All @@ -108,6 +108,7 @@ make deploy-all && make validate

## Documentation

- [CfP kit](docs/cfp/README.md) — reusable talk proposals and TLDR submission base
- [NeMo Guardrails Installation](docs/nemo-guardrails-installation.md)
- [Demo script (live, ~9–10 min)](docs/demo-script.md) — Cursor skills in [AGENTS.md](AGENTS.md) § Demo v1
- [Demo scenario logs runbook](docs/demo/demo-scenario-logs.md) — per-test log evidence and [Sandbox panel highlight rules](docs/demo/demo-scenario-logs.md#sandbox-panel-highlight-rules)
Expand Down
Binary file modified assets/overall-architecture.gif
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified assets/overall-architecture.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
94 changes: 0 additions & 94 deletions assets/preview/README.md

This file was deleted.

Binary file removed assets/preview/overall-architecture-full.gif
Binary file not shown.
Binary file not shown.
Binary file not shown.
56 changes: 56 additions & 0 deletions docs/cfp/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,56 @@
# Call for Papers (CfP) kit

Reusable content for conference and internal talk proposals about the AgentOps showcase. Start from a saved submission, swap event-specific fields, and pull snippets from shared blocks.

## Workflow

1. **Pick a base** — [`submissions/enterprise-agentops-rhoai.md`](submissions/enterprise-agentops-rhoai.md) is the canonical AgentOps + RHOAI proposal.
2. **Copy the template** — [`template.md`](template.md) for a new event or angle (hands-on lab, shorter lightning, Spanish abstract, etc.).
3. **Reuse blocks** — [`reusable-blocks.md`](reusable-blocks.md) holds key message, stack bullets, demo scenarios, links, and TDP mappings without duplicating full proposals.
4. **Align with live assets** — keep abstract/comments in sync with [`demo-script.md`](../demo-script.md), [`demo/README.md`](../demo/README.md), and repo [`README.md`](../../README.md).

When a proposal is accepted or rejected, add a one-line status note at the top of the submission file (`Status: submitted | accepted | rejected | delivered`).

## Directory

```
docs/cfp/
├── README.md # This guide
├── template.md # Blank CfP form (Red Hat TLDR-style fields)
├── reusable-blocks.md # Copy-paste snippets
└── submissions/
└── enterprise-agentops-rhoai.md # Base proposal (saved 2026-03)
```

## Related source material

| Asset | Use in CfP |
|-------|------------|
| [README.md](../../README.md) | Elevator pitch, architecture GIF, platform stack table |
| [stack-decisions.md](../stack-decisions.md) | TDP / product alignment narrative |
| [AGENT-SANDBOX-AND-OPENSHELL.md](../AGENT-SANDBOX-AND-OPENSHELL.md) | Sandbox, Landlock, OpenShell deep dive |
| [demo-script.md](../demo-script.md) | Timed live demo flow (~9–10 min core; scale to 50 min with Q&A) |
| [demo-narrative-v1.md](../demo-narrative-v1.md) | Spanish presenter narrative |
| [demo/v5/live.html](../demo/v5/live.html) | Presenter companion URL for comments field |
| [ADR index](../adr/README.md) | Technical credibility (MLflow tracing, guardrails, pinning) |

## Format cheat sheet (Red Hat TLDR)

| Slot | Session | Break | Typical use |
|------|---------|-------|-------------|
| 10 min | 9 min | 1 min | Lightning (often ×3 in a block) |
| 30 min | 25 min | 5 min | Short demo or talk |
| 60 min | 50 min | 10 min | Full demo + discussion (**default for this project**) |
| 120 min | 110 min | 10 min | Hands-on lab |
| 240 min | 240 min | embedded | Workshop / hackathon |

Virtual delivery: standard Google Meet or similar (noted in TLDR CfP forms).

## Speakers (default)

| Name | Email |
|------|-------|
| David Severia | dseveria@redhat.com |
| Carlos Cornejo | ccornejo@redhat.com |

Update per event if the panel changes.
111 changes: 111 additions & 0 deletions docs/cfp/reusable-blocks.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,111 @@
# Reusable CfP blocks

Copy-paste snippets for new proposals. Combine with [`submissions/enterprise-agentops-rhoai.md`](submissions/enterprise-agentops-rhoai.md) or [`template.md`](template.md).

## Key message

```
Your Agent. Our Platform. Production-Ready.
```

BYOA from the Red Hat AI Agentic Strategy 2026: the agent harness (OpenClaw) is interchangeable; the platform stack is not.

## Titles

**Primary (saved base):**

```
Enterprise AgentOps: Secure BYOA Agent Platform on Red Hat OpenShift AI
```

**Alternatives:**

```
Production AgentOps on RHOAI: Sandbox, Zero-Trust Credentials, and Full Traceability
```

```
Bring Your Own Agent — Run It Safely on OpenShift AI
```

## One-line problem statement

```
Many enterprises want autonomous AI agents, but security teams block adoption due to credential leaks, uncontrolled OS execution, and missing audit trails.
```

## Platform pillars (bullet form)

Use 3–4 in abstracts; full set in comments or long proposals.

```
- Sandbox containment: OpenClaw runs in an Agent Sandbox with Landlock file locks and OpenShell egress policies.
- Zero-trust credentials: All outbound traffic routes through OpenShell Gateway; inference.local injects API keys so agents never see raw secrets.
- AI guardrails: NeMo Guardrails (TrustyAI) filter requests/responses before MaaS inference.
- Full observability: MLflow captures agent reasoning, tool calls, and LLM hops for compliance tracing.
```

## Business value (closing line)

```
Business value: unlocks agentic AI adoption by solving security, credential isolation, and auditability in one platform stack.
```

## Live demo scenarios (A–D)

For **Comments** or session outline:

```
Live interactive demo: Four scripted security scenarios — credential exfiltration attempt, filesystem access (/etc/shadow), selective egress opening, and NeMo Guardrails blocking prompt injection — with real-time sandbox blocking and MLflow trace visibility.
```

| Scenario | Story | Platform proof |
|----------|-------|----------------|
| A · Credentials | Agent tries to exfiltrate API keys | OpenShell gateway key vault; keys never in sandbox |
| B · Files | Access to `/etc/shadow` | Landlock file locks |
| C · Egress | Default deny → allow google.com | OpenShell egress policy change |
| D · Guardrails | Prompt injection | NeMo Guardrails (TrustyAI) before MaaS |

## Multi-platform alignment (Comments)

```
Multi-platform alignment: Red Hat OpenShift, RHOAI 3.x (MLflow, TrustyAI, MaaS), Agent Sandbox Operator (OLM), OpenShell, and RHEL kernel security (Landlock).
```

## Links

| Label | URL |
|-------|-----|
| Presenter companion (v5) | https://davidseve.github.io/agentops-showcase/demo/v5/live.html#step-0 |
| Repository | https://github.com/davidseve/agentops-showcase |
| Architecture (local) | `docs/demo/v5/live.html` step **Overall Demo** |

## TDP mapping (Red Hat TLDR)

| TDP | Rationale |
|-----|-----------|
| Virtualization | OpenShift / RHOAI on virtualized or cloud infrastructure |
| Container Management | Agent Sandbox Operator, OLM, sandbox pods, OpenShell on OCP |
| Automation | GitOps-ready Helm deploy, scripted demo lifecycle |
| AI Platform | RHOAI 3.x, MaaS, MLflow, TrustyAI / NeMo Guardrails |

## Suggested form defaults

| Field | Recommendation |
|-------|----------------|
| Format | Presentation/Demonstration |
| Duration | 60 min (50 + 10 break) — core demo ~10 min + architecture + Q&A |
| Categories | Product and Solutions Focus; Experience Reports |
| Audience | Specialist |
| Level | Intermediate |
| Capacity | 0 (unlimited virtual) |

## Short abstract (~100 words)

Trimmed from the base submission for strict word limits:

```
Security teams block agentic AI over credential leaks, uncontrolled execution, and missing audit trails. This session demos production AgentOps on Red Hat OpenShift AI 3.x for safe BYOA workloads: Agent Sandbox with Landlock and OpenShell egress; zero-trust credentials via the gateway and inference.local key injection; NeMo Guardrails before MaaS; MLflow traces for compliance. Live scenarios show blocked exfiltration, filesystem denial, controlled egress, and guardrail enforcement. Outcome: adopt autonomous agents without sacrificing isolation or observability.
```

(~95 words)
Loading
Loading