"author:fmuecke" matching MCP servers:

Enables a restricted AI agent to run risky commands in a fresh, offline Windows Sandbox guest without access to the rest of the host, with a broker validating every request over an ACL-protected named pipe.