[imdsm]

For what it's worth, Cowork does run inside a sandbox