■ Sandboxes

Start isolated, ephemeral containers from code for agents and RL rollouts.