The just-bash sandbox deliberately trims available capabilities, exposing only the Bash interpreter interface, resulting in a smaller attack surface than general-purpose container sandboxes.