Recently agents in two sand-boxed environments were found to be able to talk to each other using cpu caching which is fucking bonkers.

https://lumienai.com/news/openai-ai-agents-cpu-cache-covert-...

My point is your most likely not going to win here. Proper sandboxing is insanely difficult.