Every step runs in a fresh, network-less container. Files only leave through /out.
Containment Lab
Seven real attacks, executed through the same sandbox path the agent uses. Nothing here is mocked.
Run ledger
Immutable record of every dispatch: exit codes, limits, artifacts and audit verdicts.
| Run | Kind | Task | Steps | Verdict | Status | When |
|---|