Microsoft is sandboxing AI agents at the OS level