Sandboxing AI Agents