A sandbox is not a permission model for multi-agent systems — Blankdot