🔬 The Audit Continues: try_ai Lied, embed Slipped, and We Made the Gates Structural

Pipe's sandbox audit rounds 3–6 found that try_ai ignored ai:false and budget settings, embed/embed_batch/import were un- or mis-gated, and the CLI --sandbox flag path allowed http_post and tcp_connect through. The fixes introduced a central egress gate and a central network helper to make these bug classes structurally impossible.

Rounds 3–6 of Pipe's sandbox audit: try ai ignored ai:false and budget, embed/embed batch/import were un- or mis-gated, and the CLI --sandbox flag path let http post and tcp connect through. The last two fixes weren't more if-branches — a central egress gate and a central network helper make the bug classes structurally impossible.