Running agents in a sandbox or VM is the wrong pattern | Hacker News Reader