AI
Sandbox isolation
The boundary a code-execution sandbox puts between model-generated code and the host - ranging from a shared process with no boundary at all to a dedicated host that shares nothing.
The primitives form a ladder: a container shares the host kernel, a sandboxed runtime such as gVisor or Kata interposes a real boundary, a microVM such as Firecracker boots a genuine guest kernel, and a dedicated host shares nothing. Where a platform's default sits on that ladder is the first thing to check, because 'sandboxed' is not a single property.