2 ms·

I think nixos. with bwrap+nix you have an ai agent sandbox that starts in under 1s and the agent is free to install whatever sw it wants as normal user