Comment by SegmentTree

I agree. I am using Eclipse Enclave with great success to sandbox my agents https://github.com/eclipse-enclave/enclave