A1ex: A simple LLM coding agent in Lua

Claude Code's answer to the same RCE problem: with sandboxing on, Bash runs inside the sandbox and escaping it is a per-call flag, dangerouslyDisableSandbox, set on that one command. Every escape shows up in the transcript.