Tool-level sandboxing and governance for RAG agent infrastructure | SaaSBrowser.ai