Here, I'll save you a bunch of reading

  > Is sandboxing sufficient to contain rogue agents?

No.