Secure private sandbox runtime for autonomous agents, enforcing declarative policies to isolate and control file, network and credential access during tool execution.