Building Security Agents That Cannot Escape Their Trust Boundary