Greenfield shell-sandbox MCP server: Arch Linux rootfs on bubblewrap with a cosmocc stage3 (landlock + seccomp) and overlayfs with discard-by-default commits.
An MCP server that runs commands inside an Arch Linux sandbox: seccomp (pledge-style) + user namespaces + bubblewrap + Landlock + overlayfs. Agent changes are discarded unless you call `env_commit`. Implemented: host capability probe, a C `stage3` inner binary (no_new_privs → Landlock → seccomp), a bootstrapped Arch rootfs with pacman, content-addressed