An agentless sandbox launched as a login shell, with provider credentials routed by the proxy.