Execute approved shell commands as root in an existing Lizard sandbox; cancellation, timeout, or request failure deletes the sandbox and files, while a nonzero exit code preserves it.
MIT
Destructive
Proves AI-generated Python does what you asked: lint, types, security, sandbox run, exact fixes.
Agentic Commerce Protocol sandbox: agent builds a cart, human approves a real PayPal payment.