The premise
Sandboxing is not a single switch. It is a collection of boundaries with different trade-offs.
Working through it
Runtime policies, resource constraints, filesystem access, network exposure, and observability each shape what a test environment can tell us. A useful sandbox makes these constraints visible and repeatable.
Current takeaway
The work is ongoing: the interesting part is designing tests that are safe while still producing meaningful evidence.