“Worktrees reduce file collisions. They do not isolate services, ports, databases, secrets, or decisions.”

Where worktrees stop: they keep files apart, but agents still share services, ports, databases and secrets. The last item, decisions, is the one no sandbox can split.