sandbox connected and streaming

deploy/k8s/base/namespaces.yaml

@@ -1,14 +1,14 @@
 # Namespace definitions for dexorder AI platform
 # - default: gateway, web, and infrastructure services
-# - dexorder-agents: user agent containers (isolated, restricted)
+# - dexorder-sandboxes: per-user sandbox containers (isolated, restricted)
 ---
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: dexorder-agents
+  name: dexorder-sandboxes
   labels:
     app.kubernetes.io/part-of: dexorder
-    dexorder.io/type: agents
+    dexorder.io/type: sandboxes
     # Enforce restricted pod security standards
     pod-security.kubernetes.io/enforce: restricted
     pod-security.kubernetes.io/enforce-version: latest