Give coding agents a disposable Linux VM, not your laptop

Remote approvals, policy checks, and execution evidence for unattended AI agents.