We’re building Stashbase for this (repo: https://github.com/stashbase) You can run your coding agent in Docker-based sandbox with explicit workspace mounts and outbound network rules. It supports your own Dockerfile or image too, so you can keep whatever research tools and dependencies you need (default Dockerfile installs Claude Code and Codex). The access rules live in a TOML profile.