2026-03-30 Engineering a Hardened AI Agent Node A step-by-step guide to running an AI agent on a rented server with zero-trust security: key-only SSH, Tailscale private networking, systemd sandboxing, and automatic patching.