Security-first, self-hosted AI agents - isolation you can prove, not just promise.