AI agent sandboxing: how to choose between primitives, runtimes, and platforms | Dark Hacker News