That is not what sandboxing solves. A good sandbox would inject credentials into provider API calls so that the model never sees credentials, but the provider is still going to see the transcript. Sandboxes do not require or imply that there is a local model. Sandboxes limit what the agent can access on the host machine as well as the network and public internet.
replyhow does sandbox help in this case when you use a provider like anthropic/openai?
replyAnother way to interpret this is that they are legally presuming that you already have sandboxed their product and anything it sees or has access to is intentional.
replyAny failure to understand what it can access or what it has permission to see from the user's end is presumably not their problem. Regardless of what the user specifically asks of the tool.
If you're still using a provider like this then you didn't sandbox the AI. You still need to follow the instruction.
replydeleted
reply