The agent cannot guard itself
Why coding agents need a sandbox the agent cannot reach, an audit log the agent cannot write, and signed instructions the agent cannot rewrite.
Every coding-agent sandbox I've set up ends in the same tired loop. I lock it down, the agent stops being useful, I loosen it, and I end up exactly where I started: YOLO mode. At best there is a sandb…