Comment by atechboy

Got it. I meant how this design compare to other sandboxing providers. For example, ephemeral sandboxes (e.g., E2B) where you spin up a clean VM for every tool call can reduce the blast radius, but maybe inefficient.