He spun up an old laptop, installed a spare Linux distro, and fenced the machine from his home network. The sandbox lived behind a small travel router configured with a separate subnet. He created a throwaway account, turned off file sharing, and set a snapshot so he could revert. It was overkill, but the part of him that had once bricked a colleague’s NAS still felt responsible.