You design the sandbox so the agent starts in that layer. The next thing you can do is to limit the network access, this is what I'm working on right now.

Or do you mean something else?