What should your agents do?

Each message runs as a sandboxed agent with its own budget and permissions. Files it saves to /output/ come back as downloads.