isolated container per run, no mounted secrets, vault at runtime, egress off. Open Source Olares (biased) runs agents as isolated workloads on your own hardware.