Dev containers under vs-code are a good example of this.

Many teams use them to make sure that the coding environment is consistent, and they are well accepted in many corporate environments as a result.

But they are a good way of firewalling agents away from files and resources that one must be able to demonstrate that the agents did not and could not have access to.