How are you sandboxing AI agents and developer CLIs?

How are you sandboxing AI agents and developer CLIs?