Sandbox as a CLI feature/shortcut to a pre-set of options for "container run"

[heckj]

I was recently digging around in how to isolate a development environment to work with agentic coding setups, and a number of them lean into a sandbox feature of Docker.

This seems perfectly aligned with how Container works today, and may just be some careful capture and injection of specific ENV variables from what I can see of it. The feature seems to provide some automatic capture and propagation of environment variables for GIT, Anthropic, Gemini, etc - the API keys primarily - for LLM services - and look like they support or expect an image that can take a prompt as the primary input, as well as potentially mapping a local directory into a bind-mounted directory within the container to operate on.

Is this something that the Container project might accept to extend the CLI for a convenience option to make this an easy thing to invoke and use locally?

[lmhajdukd]

With addition of Container Machines, sandboxes seem like a natural next move. +1.