If your agent has access to the internet at any point it may read something that convinces it to try breaking out of its sandbox.