Big companies can stop AI agents from escaping containment