The Lighthouse agent runs in your environment using controlled browser sessions, outbound-only HTTPS, and Docker-based isolation to run deterministic checks that verify real library resource access.