Claude Code offers sandboxing now: https://www.anthropic.com/engineering/claude-code-sandboxing

It's discussed in the linked post.