Sandboxes: where the agent's filesystem and shell live

Use when choosing the sandbox option for init(), implementing a custom BashFactory or SandboxFactory, or debugging sandbox-related errors.