- What broke
- AI pilots touched production directly, which no regulated business could sign off on, or stayed a chat box that could not do the work.
- What we built
- Agents that work in their own isolated machine, on hardware the client controls, with a person approving go-live.
- Isolation
- Each job runs in its own Firecracker microVM, with its own kernel
- Human gate
- A person approves first go-live and anything reaching production
- Where it runs
- On hardware the client owns or controls, air-gapped where required
