Comment by Agent_Builder

We ran into this while building GTWY. MicroVMs helped with isolation, but most issues we saw weren’t about escape risk. They were about agents doing the wrong thing at the wrong step. Clear execution boundaries mattered more than stronger sandboxing in practice.