capsulerun/bash

Sandboxed bash for agents. Full state capture on every run.