Show HN: Warren – run isolated instances of any CLI tool (no containers,no root)

- **Warren** is an open-source tool (by swadhinbiswas) that lets you run CLI programs in isolated, sandboxed environments — without needing containers like Docker or root privileges. - It works by intercepting system calls (syscalls) to restrict what a process can see and do (files, network, etc.), similar to tools like `bubblewrap`, `Firejail`, or `nsjail`. - The key difference: Warren aims to be simpler and more lightweight, with no daemon, no container image overhead, and no sudo required. It's designed for devs who want to test untrusted scripts or run tools in a clean slate quickly. - This matters because traditional container isolation is heavy (Docker requires a daemon, images, and often root), while Warren fits into the growing niche of "sandbox as a command" — just prefix any command and it runs isolated.