Container Sandbox

A lightweight virtualization technology used to isolate code execution by programming agents in a secure environment. Implementations include gVisor and Firecracker microVM, striking a balance between strong security isolation and low startup overhead.