A sandbox for code that AI writes: a small language checked before it runs, with no file or network access, default limits, and data checked against the program's inputs.