A microVM-native, zero-trust agent harness with semantic authorization - View it on GitHub