Tech companies should pause autonomous AI agent deployment until sandbox security is guaranteed