Worker-hosted sandbox