Solo build: Bulkhead — an agent sandbox that returns signed containment receipts proving what the agent touched and that nothing escaped. Closed team, not recruiting.