A secure runtime purpose-built for autonomous AI agents, letting them read and write files, install packages, and call APIs without free rein over your data, keys, or network. Each agent runs in an isolated sandbox, with kernel-level, policy-driven controls over file access, system calls, and network connections. Real credentials are injected only when a request goes to an approved address.