Comment by decodebytes

This is why I started https://nono.sh , agents start with zero trust in a kernel isolated sandbox.