Claude Code attempted to evaluate SmolVM as a secure sandbox for executing untrusted Python and JavaScript. The goal required strict CPU and RAM limits with no network access to prevent infinite loops. However, the experiment failed because the Claude Code container, a Firecracker guest, cannot run the necessary virtualization. This highlights current environment constraints for agentic testing.