It is akin to lightning a cigarette with a nuclear bomb.

The process wasn't nearly that dramatic. I created the sudo-enabled account on the tiny machines. I wrote an AGENTS.md file (104 lines). And fired up an agent. It just worked. Nothing bomb-like. (The LLM model was already running on my server. So no token bill.)