Self-hosted agents execute code with durable credentials and process untrusted input. This creates dual supply chain risk, ...