Landrun is a lightweight CLI sandbox that uses Linux Landlock to run arbitrary processes with fine-grained filesystem and network restrictions.