All the articles with the tag "supply-chain".
A sandbox limits what an agent can damage while it works; it cannot tell you whether the resulting code is safe to ship. AI-assisted development needs separate controls for the runtime and the artefact.