If you're on Linux, you can run AI agents in Firejail to limit access to certain folders/files.

Looks interesting. How does this compare to a container?

Containers aren't a sandbox:

It uses Linux kernel namespaces instead of chroot (containers are just fancy Liunx chroot)

	▲	samlinnfer 4 hours ago \| parent [-]
		Ackually, “containers” on linux are usually implemented using linux namespaces instead of chroot.