Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.
