OpenAI has added native sandboxing and a harness to its Agents SDK, partnering with Cloudflare, Vercel, E2B, and Modal for container-based agent isolation.