Feature Description

Very cool project! It is still a bit scary that the container can make any network calls. This opens the user up to exfiltration attacks. What I want ideally is:

• An HTTP(S) proxy server that filters by an allowed domain list and rejects all other domains.
• A DNS proxy that similarly filters by an allowed domain list and rejects all other queries.
• My agent running in a sandboxed container that has no network connectivity other than the abovementioned proxies.