server/container
Sandbox orchestration system for vibethis "boxes". It provisions ephemeral Docker containers using `.shai/config.yaml`, applies selective read-write overlays, and exposes both a CLI (`cmd/shai`) and a reusable API (`pkg/shai`) for launching workloads with strict workspace isolation.