I Hardened a Personal AI Agent That Reads My Email, Files, and Desktop

tldr;

private data + untrusted content + outbound capability = hard stop

a markdown file is a wishlist, real security lies within hooks and plugins