Scope note. This repository is deliberately narrow: it shows one piece of a larger puzzle — how to protect the IP of an AI agent at the hosting and endpoint layer (private ACR, signed image, ...