Sandcage is a coding agent that runs code in a locked sandbox and checks every action against a policy before it runs. A live panel shows what it tried, what got blocked, and why.