code execution

Code-execution agents are powerful and dangerous: arbitrary model-generated code runs on your infrastructure. The signal is real isolation (containers/VMs), resource limits, and network/filesystem restrictions, not 'trust the model.' Here is the answer.

One emits a JSON call per turn and round-trips every result through context. The other emits a program run in a sandbox. Cost, latency, and auditability.