That looks useful. I currently run OpenCode inside a containerd/Kata container and I see you support that backend. One thing I've been lazy with because it hasn't bit me yet is assuming the agent won't touch ".git", and diffing afterward. Being able to diff/apply modifications from the sandbox copy would be useful.