Running agent code is becoming a sandboxing problem

Prompt injection will not be patched away. A hijacked coding agent can reach only what its sandbox, egress rules and credentials allow.