platform
features
notes from inside the boundary.
Keep API keys outside your AI agent sandbox. A runnable microsandbox example with host-side secret substitution, destination rules, and violation policies.