Sandboxing

Running agent code in an isolated environment with no host access. Required for any agent that runs untrusted code.