Modern security for executing untrusted code requires robust network boundaries alongside compute isolation. Without egress control, AI agents can bypass traditional security perimeters to exfiltrate data or interact with internal systems.