Code or a tool is executed in a dedicated runtime with restricted access to the file system, network, memory and system calls. Least-privilege policies, resource limits and operation whitelisting define what the process may do. When finished, the environment is destroyed, guaranteeing no persistent side effects.
Autonomous AI systems that run code and use tools can take unforeseen or harmful actions; without isolation they threaten the integrity and security of the host system.
