Local models nail structure. Agents without the mystery box. Dev environments are the new perimeter. When hardware trust breaks. OTA meets safety reality