What it is
The Cloud Native Computing Foundation (CNCF) is a nonprofit body, operating under the Linux Foundation, that hosts and governs open-source software projects for running applications at scale across cloud infrastructure. It was established in 2015, launched alongside Google’s donation of Kubernetes — the container-orchestration system that had emerged from Google’s internal infrastructure — as the project’s seed technology. Founding members included Google, Docker, CoreOS, Red Hat, IBM, Intel, Cisco, Huawei, and VMware: essentially the infrastructure vendors with a stake in how containerized computing would be standardized.
CNCF does not build software itself. It provides neutral governance for projects that companies donate or submit, along with a maturity ladder — sandbox, incubating, graduated — that signals how production-ready a project is. Kubernetes, Prometheus (monitoring), Envoy (networking), and Harbor (container registries) are among roughly 228 projects it now stewards, backed by over 700 member organizations and more than 300,000 contributors. Its mission statement is to “make cloud native computing ubiquitous” — in practice, to keep the plumbing of modern software infrastructure open and vendor-neutral rather than controlled by any single cloud provider.
The foundation’s governance mirrors its technical layering: a Technical Oversight Committee sets technical direction, a Governing Board handles budget and business matters, and an End User Technical Advisory Board represents the companies running these projects in production, as distinct from the vendors building them.
Why it matters for AI governance and narratives
CNCF matters to the AI narrative less as an AI organization and more as the infrastructure body AI companies are now turning to when they want a permissions standard to be taken as neutral rather than vendor-owned. On September 24, 2026, Docker submitted its Sandbox Kit Specification — a format for packaging an AI agent, its tools, and a typed list of everything it is permitted to access (hosts, credentials, volumes) into a single, signable OCI container image — to CNCF for open governance. Docker’s own framing invoked precedent: this is the same move it made years earlier when it donated its container image format to the Open Container Initiative rather than keeping it proprietary.
The pattern is a recurring one in infrastructure politics: a vendor with a commercial interest in a standard (Docker sells sandboxing and containment products) seeks legitimacy by ceding formal control to a foundation whose credibility rests on having done this before for Kubernetes. Whether CNCF stewardship actually changes incentives, or simply provides a neutral-sounding home for a de facto vendor standard, is a live and unresolved question — the kind of framing contest the observatory tracks elsewhere in AI governance debates, transposed here into the substrate of how agents get contained.
Key facts and dates
CNCF was founded in 2015 as a Linux Foundation subsidiary, timed to Google’s contribution of Kubernetes 1.0. In August 2018, Google formally ceded operational control of Kubernetes to the broader community, a widely cited marker of the foundation’s shift from vendor-seeded project to genuinely multi-stakeholder governance. Jonathan Bryce serves as General Manager and Chris Aniszczyk as CTO. As of 2026, CNCF reports roughly 723 member organizations and 228 hosted projects across its sandbox-incubating-graduated maturity tiers.
The Docker Sandbox Kit Spec submission, announced at the WeAreDevelopers conference and covered in Docker’s own blog post, is licensed Apache 2.0 and has early backing from AWS, Box, Datadog, Dynatrace, JFrog, Palo Alto Networks, and Snyk, among others. CNCF’s Aniszczyk described the goal as reaching “the whole [cloud native] ecosystem at once” by building the spec on OCI, the same image standard that already underlies container infrastructure — rather than inventing a new artifact type specific to AI agents.
Where to learn more
- CNCF — Who We Are — official mission, governance structure, and project/membership counts
- Cloud Native Computing Foundation — Wikipedia — founding history, members, leadership, graduated-project timeline
- Docker Brings Sandbox Kit Spec to the CNCF — primary source on the AI-agent-permissions submission referenced in this edition
- Docker Sandbox Kit Spec: Authority as Code — technical detail on how the spec packages agent permissions into OCI images