>the sandboxes themselves may need to be kept up to date

The sandboxes don't need internet access to be kept up to date. They just need to be writable by something with internet access. There's a million ways of doing this. Run things under a hypervisor. Have a PXE boot server in your data center that serves an "updater" boot image, after performing host attestation. Or if you really want them to "update themselves", physically plug em in for the update, physically unplug them the rest of the time, and don't run updates during agentic testing.

>or may need to be monitored

The sandboxes don't need internet access to be monitored, they just need to be readable by something with internet access. Like a hypervisor, KVM. or a webcam pointed at the screen, in roughly ascending order of paranoia.

>or the sandboxes may need to updated

Did this one already! See above

>or they may be connected to specific services

That's just "not airgapped" rephrased.

This is just off the top of my head and I'm no infrastructure engineer. OpenAI saying "it's too hard" is a major cop out. The real reason is that they show no signs of actually giving a shit about AI "safety".