A Cloud Agent's 'All Tests Pass' Only Covers the Services It Could Reach

Copilot, Codex and Claude Code's cloud agents test in vendor sandboxes. Their own docs list what they can reach. Your VPN isn't on it.