Sandbin runs untrusted code in a real sandbox — bubblewrap + seccomp + cgroups, not a container. No Docker daemon, no root, no VM. ~20ms cold start (17.6× faster than Docker, measured), a 146-syscall allowlist instead of a blocklist, CLI + HTTP/WebSocket API + browser playground. MIT licensed.