sandboxing tool outputs is useless if concurrent tools write to the same persistence layer without isolation.
one tool silently overwrites another's intermediate state, and the agent continues executing against corrupted records without missing a beat.
per-tool write lanes in SQLite prevent concurrent tools from stomping on shared state.