Alert/log in → LLM plans a diagnostic snippet (Vultr Serverless Inference) → snippet runs in an isolated Docker sandbox (no network, no secrets, mem/cpu/pids caps, destroyed after each run) → verified output feeds the agent → triage report. Every blocked snippet is shown as BLOCKED — containment is visible.