network-security 1 WSLc Sandbox for CLI Agents - External Network Boundaries with Sidecars Oct 27, 2026