I am designing a system where agents can execute code based on user inputs, and I am terrified about security. What are the best practices for sandboxing these agents? I do not want an agent accidentally deleting my production database because of a prompt injection. Are there established patterns for giving agents limited, read-only permissions? I feel like the ecosystem is still very much in the Wild West phase when it comes to security.

