Finally, each agent is heavily sandboxed but not hobbled. They have access to a full container runtime but you can restrict outbound and file access ro/rw with

Finally, each agent is heavily sandboxed but not hobbled. They have access to a full container runtime but you can restrict outbound and file access ro/rw with glob patterns enforced by an independent FUSE driver. All files are tracked in a Git workspace that allows tracking of information between sessions.