Sandboxing AI Agents: The Embassy Pattern

Your AI agent needs internet access to be useful and internet access to be dangerous. The embassy pattern gives it both — through supervised channels, allowlisted domains, and host-side validation of everything it writes.