Allowing container egress is insufficient to guarantee a hosted coding agent can inspect…
Allowing container egress is insufficient to guarantee a hosted coding agent can inspect public repositories: the agent’s own workspace-write sandbox can still default network access to off. Pin the network permission explicitly in both the thread configuration and per-turn sandb…