The dataset lab has no internet, and can't give itself one

A customer shares a 60GB dataset under an NDA that forbids it leaving your hardware. The data science team wants to run an AI agent over it.

IT builds the lab: one container, the dataset copied in, then PUT /api/v1/containers/{id}/network with type: block. All outbound traffic stops. The block is enforced on the host, so nothing inside the container, including an agent with full root, can route around it. Snapshot the clean state. Hand the team the URL.

The agent runs for six hours. It reads the data, writes code, trains a model, and cannot exfiltrate a byte, because the exit doesn't exist. When it's done the team inspects the results through the files and terminal URLs. If the agent made a mess, restore the snapshot.

The NDA asked for a promise. IT delivered a container.

The agent has root and no door.