F.4 Containers, VMs, and Sandboxes

Map the isolation spectrum from sandboxed iframes to Firecracker microVMs, and understand why the choice between containers, V8 isolates, and WebContainers determines Make's cost structure, startup latency, and security posture for executing untrusted AI-generated code.