AI agent isolation

The Agent Boundary Problem

On March 8, 2026, an agent with too much reach replaced Plesk's nginx package on my VPS and knocked multiple proxied apps sideways. This is the incident, and the boundary rules that came out of it.