Capsem 2026 setup guide: sandbox Claude Code, Gemini CLI and Codex in isolated VMs
Two Cursor flaws rated 9.8 let a single prompt escape the editor's sandbox and run commands as you. Capsem takes a different line: a hardware-isolated Linux VM per agent session, with every HTTPS request inspected