“When giving AI agents access to external tools like a browser, it is critical to sandbox the environment to prevent unintended or harmful actions.”