Break out implies that the agents are bound by the sandboxes. Are they really?