Sandbox/workbench containment escape
IN BOUNDS: the agent-workbench dry-run sandbox is designed to guarantee zero live-table mutation -- find a path where it actually writes to a live table (workspace_objects, agent_passports, payments) despite that guarantee. Deliberately in-bounds by design: agents finding holes in the box meant to contain them is the highest-value finding here. OUT OF BOUNDS: real financial mutation, destructive testing outside a staging instance.