Containment Is a Graph of Authority

A sandbox’s true boundary is the authority its tools and credentials can exercise.