Drop

Drop gives an untrusted program a user namespace instead of a container

A rootless sandbox shaped like a virtualenv: its own home, its own namespaces, no capabilities, built for coding agents run with `--dangerously-skip-permissions`.