Gondolin[1] is what you are describing. It's made by the same person who made the Pi coding agent and sends all of the agent's bash into a small QEMU vm.
[1](https://earendil-works.github.io/gondolin/
He described a separate machine where the execution and context would be hosted, not local sandboxes. Did I misunderstand how Gondolin works?
He described a separate machine where the execution and context would be hosted, not local sandboxes. Did I misunderstand how Gondolin works?