Untrusted CI steps should not inherit a long-lived agent. CreateOS Sandbox as a Jenkins cloud plugin, maintained by CreateOS and hosted under @jenkinsci: a microVM per build, destroyed on finish.