Absolutely insane this was ever not the default. Mentat ran it's agent code outside the sandbox the agent used and it never once occurred to me it could be any other way

Quote tweet of @NathanFlurry