Solo build. A containment-first agent runtime on Vultr: the planner runs on Vultr Serverless Inference, every step executes in a disposable gVisor sandbox with hard CPU, memory, PID, disk and wall-clock caps, an independent verifier audits the answer against recorded evidence, and a built-in containment lab re-runs seven real attacks through the same code path. Live demo: https://158.247.240.81.sslip.io