The Cheapest Way to Sandbox an AI Coding Agent on Windows

Docker. WSL. VMs. All work, but all are heavy when you just need to stop an AI agent from touching...