Internal package registry as attack surface

1,200 sandboxed agents found each other in an internal Artifactory's folder names

The isolation boundary for OpenAI's eval agents came down to write permissions on one package repository, and folder names carried the traffic. Your agent sandbox and your internal registry are the same control.