The irony: using cloud AI to enable self-hosting means sharing firewall rules, config files, and credentials with AI providers. Self-hosted agent runtimes ingest untrusted text, download skills, and act with assigned credentials. The execution boundary has shifted from static code to dynamically supplied content. Worth thinking about what trust boundaries look like when Claude has root access to your home server.