Tool Sandbox

A tool sandbox is an isolated execution environment in which potentially dangerous tool calls — especially code execution — are run with restricted access to the host system. Sandboxes typically limit network access, file-system permissions, process creation, and execution time. They prevent an agent from causing damage outside the intended scope of its task and are a non-negotiable safety layer for any agent that can run arbitrary code.