Give each AI coding agent its own isolated machine with root, Docker, systemd — and active threat defense.