OpenAI's DNS egress incident shows why AI agent sandbox containment must cover resolvers, transitive services, telemetry, and automatic shutdown.