@misc{indiciae50091a296d8c, title = {Sandlock: Confining AI Agent Code with Unprivileged Linux Primitives}, author = {Cong Wang and Yusheng Zheng}, year = {2026}, url = {https://arxiv.org/abs/2605.26298}, note = {Source identifier: 2605.26298} }