How-tos

Write an agent sandbox contract

Define a disposable workspace, disabled network, scoped identity, resource limits, termination events, and cleanup.