OpenRig.Agents that won't leak your company data. Multi-user runtime with firejail sandboxes, segmented networking, OS-level isolation. Real shell access — boundaries enforced by the sandbox, not the model. Per-user credentials. Web UI. Self-hosted with vLLM/llama.cpp. BSD License.