# 🔬 The Audit Continues: try_ai Lied, embed Slipped, and We Made the Gates Structural

> Source: <https://pipe-lang.com/blog.html?post=sandbox-audit-continued>
> Published: 2026-08-13 00:00:00+00:00

Rounds 3–6 of Pipe's sandbox audit: try_ai ignored ai:false and budget, embed/embed_batch/import were un- or mis-gated, and the CLI --sandbox flag path let http_post and tcp_connect through. The last two fixes weren't more if-branches — a central egress gate and a central network helper make the bug classes structurally impossible.