How Claude Code and Codex approach sandboxing
instavm.io