Sandbox first then model swap. Most agent bugs are path and permission issues not model IQ. I refuse to debug a runaway tool call outside a jail.