Agent Sandbox as Default

Projection: Risky tools will run inside ephemeral, per-task environments with isolated files, credentials, and network access. The source record establishes agent tooling and control concerns, but not sandbox-by-default operations. A meaningful readout pairs broad production use with measured reductions in incidents or blast radius.