Sandboxing

Restricting what an agent's shell can touch on the host machine (tools like bubblewrap and socat). Containment beats trust.