Three Sandbox Failures That Let AI Agents Escape

The escapes blamed on rogue AI are actually missing seccomp, open egress, and filesystem leaks — here's how to close each one.