How can I be sure this wasn't done by an agent that escaped from its sandbox... again?