There's a conversation developers keep having right now, and it's the same conversation in three different disguises. "How do I run this AI agent without it nuking my repo?" "How do I try this MCP server without handing a stranger's code my shell?" "How do I check out this random GitHub project without installing half of it into my laptop?" Three questions, one answer. All three are untrusted code running as you, on your machine, with your files and your tokens . That's the same trust class. It deserves the same response: a local sandbox you can install in one click . Not a cloud API you pipe prompts into. Not a closed-source "trust us" runtime. A sandbox whose boundary is on disk, whose source is on GitHub, and whose kill switch is a window you close. And as far as we can tell, nothing of that exact shape existed until now.…