Operating inside the lethal trifecta: Blast radius reduction in AI agent deployments Sophos