Sandbox

Shell runs confined to your workspace. Both backends prove enforcement with a real probe first, and refuse to run rather than fall back unconfined.