Native sandboxing (e.g. Claude Code `/sandbox`)

Sandboxing built into the harness itself. Students learn how a harness can sandbox
execution natively and how this reduces permission-prompt fatigue by allowing safe
actions to proceed without interruption while still containing risk.