I see that the default settings for our sandbox indicate workspace-write permissions, network access, and approvals only in case of failure. However, it seems I should be careful about browsing proactively unless specifically requested to do so by the user. So, I’ll make sure to ask before I browse to ensure I’m following the right protocol. That makes sense, and I appreciate the clarity!