Web agent → Vultr Serverless Inference → Docker sandbox (--network none, destroyed after run).
--network none
(idle)