How We Built Our Sandboxed Claude Agent without Leaking Its API Keys

Everyone is building agents, but most harnesses were built for a “local-first” world. They assume the person at the keyboard is the owner of the API keys. In production, that assumption is a