GitHub - containers/bubblewrap: Low-level unprivileged sandboxing tool used by

Another container/sandboxing tool. Claude code is apparently using it for sandboxing.