I Sandboxed My AI Coding Agent with Bubblewrap. It Still Read My Secrets

Three Decisions, Three Places Same agent. Same sandbox. Different folder. Different blast...