Setting explicit resource limits for each sandbox (similar to Linux cgroups' hard limits on CPU, memory, and I/O) can prevent loss of control over resources and API quotas caused by runaway agent problems.