Run immutable Linux for AI agents with microVM isolation, default-deny networking, and encrypted secrets.