LLM Sandbox Goes Containerless: Bubblewrap and NsJail Backends How LLM Sandbox runs each command in a fresh native Linux sandbox while keeping session files, plus controlled benchmarks against Docker and the tradeoffs that matter.