Airlock (Blast Radius Zero): an independent policy engine, disposable Docker sandbox and verifiable evidence receipt for AI agent actions, built on Vultr.