Stop Using Static Sandboxes. Your AI Agents Are Learning to Pick the Lock.
Harvard and CMU researchers just proved that static sandboxes are failing to contain long-running AI agents. Instead of blocking obvious attacks, developers need dynamic capability scoping that moves with the task. If your security perimeter doesn’t move, your agent has already mapped it.