Sandbox

A container or virtual machine with no secrets, no network, a time limit and a throwaway file system. Use it if an agent must run code it wrote.