comparison for local agent sandboxes:

    solution         art  ctr  vm   hard  fs   net  proc creds
    sanbox           yes  no   no   no    no   no   no   no
    Docker Sandbox   no   no   yes  yes   opt  yes  no   yes
    OpenShell        no   yes  no   no    yes  yes  yes  yes
    OpenSandbox      no   yes  no   yes   opt  yes  opt  opt
    agent-sandbox    no   yes  no   yes   opt  opt  opt  no
    AgentScope       no   yes  no   yes   opt  opt  no   no