Agents are non-deterministic. Security assumed determinism. Sandboxing and isolation aren't just for AI; they're the only path when we can't policy our way out.