Scaling agents locally with Incus, Ansible, Tailscale I describe how I view the problem of filesystem isolation with untrusted agents, and how I use Incus VM's to unblock my memory problems and improve security.