Block a user
Define workspace, image, state, and credential boundaries
Define the supervisor security and deployment contract
Define sandbox resource lifecycle and durable reconciliation
Prove active-turn continuity across daemon restart
Research Pi sandbox state, credentials, MCP, and egress requirements
Research the gVisor supervisor topology for both Linux deployments