Breaking out: Can AI agents escape their sandboxes?