Sandboxed version control for autonomous coding agents: an agent's untrusted code runs i…