[overu589]

I think you see it backwards.

You want the AI agent on the outside orchestrating. This will easily scale to many nodes.

If you’re a masochist, the first node control agent could run in the same physical host as the “AI”.

This node controller only needs to be a service with desired permission (root in your line of thinking), which dutifully executes whatever the LLM excerpted for the controller.

You could make those docker containers, VMs, or other servers. You only need a suicidal script which does whatever you output, and responds with stdout/stderr for the feedback loop.