Sandbox para agentes que executam código: as cinco fronteiras que importam (2026 edicao)
English summary: How to isolate agent-generated code execution — the five containment boundaries, resource limits, deny-by-default egress, credential scoping, and the threat model that.