CNCF's shadow-AI post makes the case for treating agents as identities

A new CNCF community post from Matteo Bisi at ReeVo argues for treating AI tools in the CI/CD pipeline as privileged identities, and maps the threat model plus available open-source controls stage by stage. The gap it names: no CNCF graduated project owns end-to-end AI governance yet.