pi + pi web on a raspberry pi. an agent is just a path with its own .pi/ folder. you can have clown/.pi with only jokes mcp enabled (no bash, no read/write) and

pi + pi web on a raspberry pi. an agent is just a path with its own .pi/ folder. you can have clown/.pi with only jokes mcp enabled (no bash, no read/write) and for sessions spawn from this path, the agent will think it is in the circus reality and will never go rogue (no tool to do so)