This looks great, like the simplicity of a chroot with some actual security. I’m guessing it can be used to invoke individual commands from the agent harness i

This looks great, like the simplicity of a chroot with some actual security. I’m guessing it can be used to invoke individual commands from the agent harness instead of jailing the entire harness? That would enable making it much more restrictive, I think.