Confidential Agents for RAG vs enclaive Buckypaper CVMs (2026)