diff --git a/pkg/workflow/aw_info_steps_test.go b/pkg/workflow/aw_info_steps_test.go
index 3677a674c0..f549b98d7c 100644
--- a/pkg/workflow/aw_info_steps_test.go
+++ b/pkg/workflow/aw_info_steps_test.go
@@ -29,8 +29,6 @@ permissions:
   issues: read
   pull-requests: read
 engine: copilot
-network:
-  firewall: true
 ---
 
 # Test firewall enabled
@@ -49,8 +47,8 @@ permissions:
   issues: read
   pull-requests: read
 engine: copilot
-network:
-  firewall: false
+sandbox:
+  agent: false
 strict: false
 ---
 
diff --git a/pkg/workflow/blocked_domains_integration_test.go b/pkg/workflow/blocked_domains_integration_test.go
index 7292a5e730..befd726f49 100644
--- a/pkg/workflow/blocked_domains_integration_test.go
+++ b/pkg/workflow/blocked_domains_integration_test.go
@@ -29,7 +29,6 @@ permissions:
   contents: read
 engine: copilot
 network:
-  firewall: true
   allowed:
     - defaults
     - github
@@ -106,7 +105,6 @@ permissions:
   contents: read
 engine: copilot
 network:
-  firewall: true
   allowed:
     - defaults
     - github
@@ -177,7 +175,6 @@ permissions:
   contents: read
 engine: copilot
 network:
-  firewall: true
   allowed:
     - defaults
     - github
@@ -238,7 +235,6 @@ permissions:
   contents: read
 engine: claude
 network:
-  firewall: true
   allowed:
     - defaults
   blocked:
@@ -300,7 +296,6 @@ permissions:
   contents: read
 engine: codex
 network:
-  firewall: true
   allowed:
     - defaults
   blocked:
diff --git a/pkg/workflow/step_summary_test.go b/pkg/workflow/step_summary_test.go
index df633c2db5..9a78b09da1 100644
--- a/pkg/workflow/step_summary_test.go
+++ b/pkg/workflow/step_summary_test.go
@@ -167,7 +167,6 @@ network:
   allowed:
     - defaults
     - node
-  firewall: true
 ---
 
 # Test Workflow Overview