Giving an AI Agent a Real Sandbox: Filesystem and Network Jail, in Java

Ask a coding agent to run a build, and you have just handed a language model the ability to cat ~/.ssh/id_rsa . Prompt-level instructions like "do not read sensitive files" are not a security boundary...