Pi does this by default. Since the frontier lab agents are vibe coded you really should sandbox any agent you run period.