Your Sandbox Shouldn't Keep Its Install-Time Network Access

Your AI agent needed internet access to install a dependency. Why should it still have that access when it starts running code you never wrote? Say your setup step needs pypi.org, files.pythonhosted.o