What engineers need to decide before deploying agents against private data: model hosting, credentials, access checks, coordination and run traces.