Blast Radius Zero is a dsh plugin that takes a repository and a goal, then runs every untrusted command inside a disposable Microsandbox microVM on a Vultr VX1 Cloud Compute instance, so an agent can delete anything it likes without touching the host. Results come back as a severity-ranked findings table plus a before/after metric table where every row carries the command that produced it, its exit code and a SHA-256 hash, all appended to a hash-chained receipt log. Five tools, one policy gate, zero runtime dependencies, MIT licensed. Track 01: Blast Radius Zero. Who we need: someone with a KVM-capable Vultr account to run the live containment proof; help pointing a domain at the demo box for TLS; a second pair of eyes on the Python sandbox runner; and a design hand for the 91.5 s demo cut.