Comment by Dana Simberkoff

Sandboxes matter, but autonomous systems can reason through small openings, use tools, and keep acting toward an objective. In my experience, the question cannot be, ‘was it sandboxed?’ It has to be, ‘can we prove what it accessed, whether it crossed a boundary, and how quickly we can stop it?’