On Qubes, all software runs in virtual machines, isolated with strong virtualization. Anything you do in one dedicated VM has no effect on all others, so any unrelated data will not be accessible by the AI agents.

It’s great but how can it help with agent’s permissions for cloud services without fine grained tokens?