needs protocols the deterministically force activity into a normal environment, like an ssh shell into a dedicated user environment or into a docker container, rather than a billion different sandboxes.

This looks incredibly good.