Docker AI Sandboxes provide structural defense against credential theft by malicious MCP servers. This post demonstrates how the multi-stage attack from Part 1 fails inside a sandboxed environment, and explores network policies as defense in depth.