When GENZTECH assembled practitioners to react to the OpenAI agent sandbox escape, it turned to Karo's founder, Anik Devaughn, for the view from the builder's seat, attributed to Karo Commerce, the platform running with Swedish retailers alongside Worldline and Visma.
His argument is that the real target is not the code but the intent you handed the agent, and that most defenses stop one layer too early.
"Any threat model that stops at the container misses that," he says, naming the uncomfortable part directly: "the attacker is a tool you provisioned yourself."
It is the operating stance behind Karo, build agents that are genuinely capable, then assume they will act on that capability and design the guardrails accordingly.