Initially, I had sketched some ideas of having some sort of "safe" artifact-hosting service to serve any vetted packages to an agent that it may want to install, but then the huggingface "note passing" incident made me think it was safest to just have a frozen, pre-installed image that was configured to have all the vetted packages.
If anyone's interested in the cityscape render, I pasted it here: https://www.dropbox.com/scl/fi/w78fzyd80qvy5uya9x1vq/citysca...