agent-infra/sandbox Architecture