It was a complete buggy mess - at one point I asked Gemini why it could not use the network despite having network access enabled in the sandbox settings, and it told me that although it had network access, it couldn't use mdnsresponder while running with the built-in sandbox. Like, how well thought out, network access without DNS.
After burning through about 80% of my 5-hour window of credits, I finally just went sandboxless to get the thing running. It hit the limit pretty quickly. I waited until the 5 hour limit was up, and found the 5 hour window had morphed into a one week window, still drained of credits.
I thought at least I can keep on using Gemini CLI until Google figures out this Antigravity thing. Oh well.