Anthropic Sandbox Runtime: OS-Level Agent Sandboxing Without Containers

How Anthropic's sandbox-runtime uses native OS primitives and proxy filtering to enforce filesystem and network restrictions on agent processes.