Solo build: an agent whose every action runs inside a throwaway Docker sandbox on Vultr Cloud Compute. Containment-first, with a red-team suite that tries to break out.