Tool-level sandboxing for RAG agents - governance and isolation | SaaSBrowser.ai