Per-Tool Sandboxing for AI Agents: Why One Sandbox Is Not Enough · HackerTrans