How rootless Docker, Linux user namespaces, and cgroups v2 contain autonomous AI coding agents without escalating to host root privileges.