An agent execution mode in which terminal commands run in a restricted environment that blocks unauthorized file access and network activity, with network limited to the sandbox allowlist; admins enable it org-wide through the Run Mode policy.