What is an AI sandbox, and why do AI agents keep escaping them?