A lightweight, container-free command sandbox that blocks network by default and restricts the filesystem — defense-in-depth for semi-trusted code and AI coding agents.