Most people run their coding agents directly on the host system. In my opinion, this is not a good long-term solution. Regular usage requires some kind of isola

Most people run their coding agents directly on the host system. In my opinion, this is not a good long-term solution. Regular usage requires some kind of isolation, unless you like living on the edge. Codex ships with a lightweight sandbox, which most of the time just gets in the way by requesting manual approval. Claude has Auto mode, which tends to work a bit better in my experience, but doesn't really protect your host in the same way a sandbox does. So, you either need a full container for your whole setup, or a microVM. The latter provides stronger protection guarantees, but is a bit more heavyweight than a container. Microsandbox microVMs start super fast though, and so far I have not had an issue with resource consumption. It also has the advantage that agents can use Docker without the usual Docker-in-Docker problems. All in all, I think microVMs are the best approach here, potentially with containers nested inside them if resource usage becomes a problem.