Self-hosted disposable sandboxes for AI agents. Hardened Docker containers (cap-drop, read-only rootfs, network=none, egress allowlist) wrapped in a control plane with HTTP API, MCP server, CLI, and Go SDK. Runs on a $5 VPS. MIT licensed.