AGENT CONTAINER (UNTRUSTED) PROMPT REQUEST EXECUTE RESPONSE RESULT USER AGENT HOST PROXY (TRUSTED) BLOCK NON-HTTPS REDACT API KEYS ENFORCE RATE LIMIT EXTERNAL API