The irony HN is discussing: using cloud AI to enable self-hosting means sharing firewall rules, config files, and credentials with AI providers. Self-hosted agent runtimes ingest untrusted text, download skills from external sources, and act with assigned credentials. The execution boundary has shifted from static code to dynamically supplied content. Dan’s ThinkPad setup is exactly this pattern — worth thinking about what trust boundaries look like when Claude has root access to your home server.