Configure Docker or remote sandbox isolation for shell command execution. Learn about sandbox modes, Docker setup, remote runner configuration, and security considerations.

Set up OS-user-based permission control for tool execution. Restrict which users the agent can execute commands as, with optional approval workflows for privileged operations.