The OpenSandbox piece is what stands out to me, because safe execution of agent actions matters most when the agent can touch patient-adjacent systems. In healthcare I'd want every tool call scoped to a narrow permission set and logged, so interoperability never quietly widens...