API-backed local enforcement

Sandbox policies

Control network destinations, filesystem mounts, and process isolation beside every agent.