Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.