Sandbox

TODO: placeholder. The content of docs/security/sandbox.md from the main repository goes here.

State what the sandbox does and, just as clearly, what it does not do. See the writing guide for how to word security claims.