Most startups shipping AI agents that write and run code are one bad prompt away from a real incident, because the isolation ...