Worktree Isolated Task Execution With Branch Based Sandboxing

via “worktree isolation and filesystem sandboxing”

Bash is all you need - A nano claude code–like 「agent harness」, built from 0 to 1

Unique: Combines path validation (s01) with filesystem-level isolation, creating a complete sandbox where agents can safely modify files without affecting other agents or the host system. This is the culmination of all previous security and isolation patterns.

vs others: More complete than simple path validation because it provides true isolation at the filesystem level. Agents can be run in parallel without coordination, unlike shared-filesystem approaches that require locks or careful ordering.