Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

Local-first, self-hosted AI agent runtime and MCP bridge with sandboxed sessions, memory, credentials, audit/replay, and a local Console.