Anthropic has documented how it contains AI agents in products like Claude Code and Claude Cowork through sandboxes and access limits, since pure human oversight is unreliable—users approve approximately 93 percent of all requests without careful review.