Most agents that are useful need access to private data.

They need to query internal databases, call internal systems, or read data that was never intended to be public. These requirements immediately raise questions about network exposure, credential handling, and compliance.

How does the agent connect to a private database? Where does it run?...