Sandbox

An isolated execution environment (containers, restricted networks, resource caps) where agent actions can't reach anything they shouldn't. The security boundary that prompts pretend to be.