You can no longer assume a mere VM will contain a sufficiently advanced AI agent.