A sandbox without a network boundary is only half a sandbox

Running untrusted code safely requires more than separating it from the host. You also have to control what that code can reach.This matters more as AI agents gain the ability to read files,...