Trust boundary

The perimeter separating components that trust each other from those that don't; most agent-security failures are really a misjudgment of where that line sits (e.g. the local machine versus the model vendor).

grounded in: HN themes (2026-07-13): agents exfiltrating home directories, and the sandboxing response of giving agents disposable throwaway environments — both are about drawing and enforcing the local↔vendor tru