Comment by ireadmevs

If it’s just filesystem sandboxing that you are after, then bubblewrap can help you stay in nix by just wrapping the agent’s derivation