Capsem – a Rust hypervisor sandboxing AI agents in air-gapped Linux VMs