Sandbox

A sandbox restricts the environment in which code or a tool runs. Depending on its design, it can limit files, network access, privileges, or resource use. The name alone says little about the actual restrictions.

Isolation does not make an action correct

A lookup tool inside a sandbox can still disclose records if its credential permits reading every tenant. The runtime may be isolated while application authorization is missing.

Define both what the tool may reach and what each caller may request. Keep unnecessary credentials and routes out of the environment.

Test the configured boundary

Check denied file access, prohibited network destinations, and resource limits using a controlled environment. Verify allowed work still succeeds. Sandboxes have implementation and configuration limits, so combine isolation with narrow tools, authorization, and output handling rather than treating it as a complete security guarantee.

Reference: OWASP: Excessive Agency.