durable-harness offers three filesystem options: virtual() (files are kept in the session log, with a bash-compatible shell, and no access to function files or the network), virtual({ durable: false }) (files are kept in memory and cleared at the end of each turn), and sandbox() (provides a separate Vercel Sandbox, with /workspace located on Drive).