inside the box the agent has full permissions and its own Docker daemon, so it installs, builds and runs freely. nothing reaches your host until you run git fetch and review the commits. works with…