Rocket science is not required to completely isolate inference servers from whatever infratructure "agents" runs on. After all it can be just some GPU server s

Rocket science is not required to completely isolate inference servers from whatever infratructure "agents" runs on. After all it can be just some GPU server spewing text over network. Like there are no way to connect back to it. Nothing except inference running on servers with GPU so there just nothing to "hack".