An Embedded Agent Sandbox Should Be a Library, Not a Service | Hacker News Reader