The brief
Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions. The Alliance aims to provide a shared baseline for agent governance, similar to how PCI DSS and the Center for Internet Security (CIS) have standardized security practices in other industries. Historically, technology adoption has followed a reliable pattern, where a capability spreads, each vendor and team builds its own approach, and the industry eventually agrees on a shared baseline to accelerate adoption.
The Blueprint Alliance and Agent Baseline respond to the complexity of AI agent security by providing a collaborative approach to governance. Docker governs the inside, the environment where the agent executes, while most Alliance members govern agents from the outside, focusing on who the agent is, what it can reach, and what it is observed doing. The Alliance's whitepaper notes that runtime support is necessary to pause an agent without collateral impact, and Docker's Sandboxes, MCP Gateway, and Hardened Images can help achieve this.
The Agent Baseline controls are citable, and partners like Okta offer assessment tools, such as the AI Blueprint Assessment Tool. Docker's Navigator Partner Program rewards AI governance work, and the Alliance publishes reference integrations that technology partners can use to integrate against a published target. By collaborating on a shared baseline, the industry can overcome the complexity of AI agent security and accelerate adoption, as seen in the examples of PCI DSS and the CIS.