zviz investigates what minimal-overhead sandboxing looks like for AI-generated code execution. Built in pure Zig, it implements gVisor-inspired container isolation with near-zero runtime cost, studying the trade-offs between security guarantees and performance.