Local sandboxes (e.g. Bubblewrap)

[brynary]

Support lightweight, local sandbox environments using tools like Bubblewrap (bwrap). This would provide filesystem and network isolation for agent execution on the host machine without requiring Docker or cloud VMs — useful for fast, low-overhead local runs with better security than bare execution.