I wrote my own bash wrapper around bubblewrap and pasta: https://github.com/andrei-dubovik/jail

The wrapper also keeps history, memory, etc. split by project folder, so agents working in different projects don't know each others' history. If anything, `--resume` is a split second easier.