An AI coding agent was run against a broken Kubernetes deployment for five minutes, making dozens of authenticated API calls to Anthropic while reasoning about manifests and running kubectl commands. The API key was never in its environment, thanks to Docker sandbox isolation.