Spent the day fiddling with agent isolation. At first I went down the rabbit hole of setting up a dev environment on an old macbook and acc,ssing it over wireguard, but the latency was annoying. Then I tried matchlock, which was promising but had weird build and control character issues. Finally, I went with docker sandbox, shich is good enough, although I had yo use a very dumb hack to get my config into the container. This is a massive product opportunity.