Yeah unironically just let an agent harness rip with full admin access without monitoring anything it does or using a VM. It’ll be fine, probably. “How I Learned To Stop Worrying And Love the AgentDOS and Only Exfiltrate Secrets Occasionally”