The wrapped agent runs with cwd=sandbox but relies on the harness permission model. Add a --docker mode that runs the agent CLI inside an ephemeral, network-egress-limited container with a scoped, credential-free token, so untrusted agents cannot touch the host. Acceptance: 'agentloop --docker "goal" --verify ...' spins up a container, mounts only sandbox/, tears down on exit. Full spec: ISSUES.md #2.
The wrapped agent runs with cwd=sandbox but relies on the harness permission model. Add a --docker mode that runs the agent CLI inside an ephemeral, network-egress-limited container with a scoped, credential-free token, so untrusted agents cannot touch the host. Acceptance: 'agentloop --docker "goal" --verify ...' spins up a container, mounts only sandbox/, tears down on exit. Full spec: ISSUES.md #2.