agent-sandbox

Enables AI coding agents to run Kubernetes inspection and Terraform plan/apply operations inside ephemeral gVisor sandboxed jobs with short lived, narrowly scop