Before an AI Agent Gets a Browser, Verify agent-workspace-linux's Isolation Contract

agent-workspace-linux is useful because it changes the target of automation. Instead of driving the host desktop, it provisions a hidden Linux X11 workspace with its own window manager, browser, clipb