A zero-setup sandbox for AI agents that enforces least-privilege filesystem, network and credential policies per profile.