Secure always-on AI agents on cloud VMs with containment, least privilege, credential controls, patching, monitoring, and recovery planning.