{"slug": "ibm-and-coreweave-co-design-controls-for-agent-workloads", "title": "IBM and CoreWeave co-design controls for agent workloads", "summary": "IBM Research and CoreWeave Inc. co-designed identity management and workload isolation controls for agent workloads, extending IBM's internal identity systems into CoreWeave and using CoreWeave Sandboxes for isolated agent code execution, IBM senior technical staff member Brian Belgodere said at CoreWeave's Fully Connected event. IBM built a large H100 cluster itself before partnering with CoreWeave, a move Belgodere said was driven by the cooling and power demands of a subsequent hardware generation, and IBM now measures the performance impact of security controls against benchmark results to weigh tradeoffs with security teams. Belgodere described the effort as \"a supply chain problem, top to bottom,\" spanning hardware, firmware, kernel levels, code, data provenance and agent images.", "body_md": "### IBM and CoreWeave co-design controls for agent workloads\n\nAgent workload isolation is becoming a practical infrastructure challenge as research teams move beyond training models to running code and testing agents. Systems built for intensive computation must now accommodate workloads that interact with tools, storage and other services.\n\nIBM Research’s infrastructure must support increasingly varied workloads as its model development practices evolve. Reinforcement learning adds a task-execution stage that changes what those systems must accommodate, according to [Brian Belgodere](https://www.linkedin.com/in/brian-belgodere-050a953) (pictured), senior technical staff member at International Business Machines Corp.\n\n“The RL process is [that] you are in the middle of training a model,” he said. “At some point, you take that checkpoint and then actually load it into inference, ask it to do something and you’re measuring. That’s your testing phase.”\n\nBelgodere spoke with theCUBE Research’s [Dave Vellante](https://www.linkedin.com/in/dvellante/) and [John Furrier](https://www.linkedin.com/in/furrier/) at the [Fully Connected event](https://www.thecube.net/events/coreweave/coreweave-fully-connected-2026), during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed evolving research workloads, security-performance tradeoffs, shared infrastructure engineering and agent workload isolation. *(* Disclosure below.)*\n\n### From model training to executing agent code\n\nIBM Research’s work on its [Granite family of models](https://www.ibm.com/granite) required substantial computing infrastructure. The cooling and power demands of a subsequent hardware generation helped drive IBM’s decision to work with CoreWeave Inc., according to Belgodere.\n\n“That was what gave me, ‘Hey, go build out our infrastructure,’” he said. “We went out and built a large H100 cluster, and we did it ourselves: got the space, soup to nuts. It was a huge task.”\n\nThe relationship has expanded into joint engineering around identity management and workload controls. IBM supplied requirements for extending its internal identity systems into CoreWeave, then refined the implementation through several iterations, according to Belgodere.\n\n“Oftentimes they will come to us and say, ‘Hey, we’re thinking of this, can we get your feedback?’” he said. “And we’ll happily go through it.”\n\n### Agent workload isolation becomes a design requirement\n\nMuch of IBM Research’s cluster is single-tenant, with its own storage deployed inside CoreWeave and additional capacity available within cost and security parameters, according to Belgodere. IBM’s collaboration with CoreWeave also includes [CoreWeave Sandboxes](https://www.coreweave.com/products/coreweave-sandboxes), which support isolated execution on dedicated infrastructure or through a managed serverless runtime. These options let researchers choose where agent code runs and what resources it can access.\n\n“There are a lot of misses, and people tend to underestimate the cost to change some of these decisions,” Belgodere said. “If you decide to make a poor architecture decision early on, the cost is either going to be [that] you accidentally bought way too much networking infrastructure, or you have to go buy and refit everything.”\n\nIBM measures the performance impact of security controls against benchmark results, using those findings to discuss tradeoffs with security teams. Workload isolation sits alongside [enterprise identity integration](https://siliconangle.com/2026/09/22/exclusive-coreweave-launches-remote-key-encryption-to-keep-customer-keys-off-its-cloud/) as part of that broader security architecture.\n\n“This is a supply chain problem, top to bottom,” he said. “It’s not just the hardware, it’s the firmware, kernel levels, code, your data provenance. Then you get into the whole world of agents, your images. It is an absolute provenance problem.”\n\nHere’s the complete video interview, part of SiliconANGLE’s and theCUBE’s coverage of the [Fully Connected event](https://www.thecube.net/events/coreweave/coreweave-fully-connected-2026):\n\n*(* Disclosure: TheCUBE is a paid media partner for the Fully Connected event. Neither CoreWeave, the sponsor of theCUBE’s coverage, nor other sponsors have editorial control over the content on theCUBE or SiliconANGLE.)*\n\n##### Photo: SiliconANGLE\n\n# A message from John Furrier, co-founder of SiliconANGLE:\n\nSupport our mission to keep content open and free by engaging with theCUBE community. **Join theCUBE’s Alumni Trust Network**, where technology leaders connect, share intelligence and create opportunities.\n\n- **15M+ viewers of theCUBE videos** , powering conversations across AI, cloud, cybersecurity and more\n- **11.4k+ theCUBE alumni** — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network\n\n### Are you an AWS customer?  Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: [https://siliconangle.com/aws-marketplace/](https://siliconangle.com/aws-marketplace/)\n\n##### **About SiliconANGLE Media**\n\n[SiliconANGLE](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fsiliconangle.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=SiliconANGLE&index=9&md5=646b1b564e2259100a2b8638aab0a552),\n\n[theCUBE Network](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecube.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Network&index=10&md5=7de2a85f95ab4a4a495cede20b8cb1da),\n\n[theCUBE Research](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fthecuberesearch.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Research&index=11&md5=7bb33676722925eb57d588ec343e4f6f),\n\n[CUBE365](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.cube365.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=CUBE365&index=12&md5=d310fb35919714e66ad8d42c9c0c1bc6),\n\n[theCUBE AI](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecubeai.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+AI&index=13&md5=b8b98472f8071b23ebb10ab9a8dd0683)and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.\n\nFounded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.", "url": "https://wpnews.pro/news/ibm-and-coreweave-co-design-controls-for-agent-workloads", "canonical_source": "https://siliconangle.com/2026/10/02/ibm-coreweave-co-design-controls-agent-workloads-fullyconnected/", "published_at": "2026-10-02 20:12:25+00:00", "updated_at": "2026-10-02 20:38:36.256209+00:00", "lang": "en", "topics": ["ai-infrastructure", "ai-agents", "ai-safety"], "entities": ["IBM", "IBM Research", "CoreWeave Inc.", "Granite", "CoreWeave Sandboxes", "Brian Belgodere", "H100", "theCUBE Research"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/ibm-and-coreweave-co-design-controls-for-agent-workloads", "markdown": "https://wpnews.pro/news/ibm-and-coreweave-co-design-controls-for-agent-workloads.md", "text": "https://wpnews.pro/news/ibm-and-coreweave-co-design-controls-for-agent-workloads.txt", "jsonld": "https://wpnews.pro/news/ibm-and-coreweave-co-design-controls-for-agent-workloads.jsonld"}}