15 · The Workbench
Local Sandbox
On-machine execution boundary
Constraints on what a local agent can touch — allowed directories, command allowlists, network blocks — so it cannot read your entire home folder or exfiltrate keys by default.
Concrete example
The agent may edit ./src but cannot run curl to arbitrary URLs without approval.
Why it matters
You own the security boundary on local agents.