Snapshots, copy-on-write, and the economics of agent sandboxes