Anthropic's sandbox controls can restrict network egress to approved domains or disable network access entirely.

“The other nice thing is, like, on that sandboxing infrastructure, we can make sure that we have really great egress controls.”

“So we have, like, domain allow lists and things like that, or you just, like, totally shut off network access so that you can't say, "Okay, agent wrote untrusted code.”

“That code executes in sandbox, and that code can, like, reach out to the internet," right? Like, now it only can reach out to where you say it can reach out to.”