Building secure, scalable agent sandbox infrastructure