#385 CRITICAL: No strict sandbox mode - unsandboxed execution proceeds with warning only

sandbox.py:226-232 - When Docker unavailable and not in container, system logs WARNING but executes untrusted code on host anyway. Fix: Add config sandbox.strict_mode=true that refuses execution without sandbox.