AI Agent Sandbox Linux VM [2026]: Safe Tool Use, No K8s

If your coding agent can run `git`, `pip`, or a shell, it deserves its own disposable Linux VM. Default-deny egress, snapshot rollback, scoped secrets, and per-run audit bundles. No Kubernetes required.