A safe, private runtime for agent fleets that enforces filesystem, syscall and network policies inside isolated sandboxes.