Why aren’t you sandboxing your agent?

I have my agent sandboxed, codex is sandboxing by default.