Function agent_context 

pub fn agent_context() -> bool

Whether murk is running on behalf of an AI agent, via the explicit MURK_AGENT opt-in. Agent context forces strict mode (see strict_mode) so the honest path never falls back to the operator’s stored key. murk agent exec sets it (alongside MURK_STRICT) for the child. This is a safe default, not a sandbox: a child that controls its own environment or can read ~/.config/murk/keys directly is outside murk’s boundary — real containment is OS-level isolation (see the note in docs/ai-agents.md).