Sandbox
A restricted space an agent runs inside, where a command can only reach the files and the network it was explicitly given.
The question a sandbox answers is not whether the agent is well behaved but what happens when it is wrong, or when the page it just read told it to be wrong. Confinement holds in both cases; good intentions hold in neither.
It is what makes the permission question smaller. Inside a bounded space many actions stop being worth a prompt, because the worst outcome is contained — which means the confirmations that remain are the ones actually worth reading.
The limits deserve to be known. A sandbox that still has network access can still send what it read somewhere, and one with a writable checkout can still ruin the branch. What is fenced in matters more than the fact that a fence exists.