Comment by throwaw12

IMO sandboxing is not a solution in this case. Imagine a scenario where agent deletes the test code, pushes it and another agent evaluated it as low-risk PR because you are not updating the business logic and PR gets merged to master.