Sandboxing AI Agents in Linux