I don't want to give Claude SSH access to my home server

AI agents are getting scary good at ops work. Claude Code, Codex, OpenHands — they can SSH into a server, read logs, restart containers, fix configs. It works. But I still won't give my home server an SSH key for an agent. A shell is too sharp. It can inspect anything. It can delete anything. It can rm -rf the wrong path very fast and very confidently. I want the agent to help operate my server, not be the operator. So I've been building HomeButler in the opposite direction: not "AI runs my...