diff --git a/nanobot/agent/tools/sandbox.py b/nanobot/agent/tools/sandbox.py
index 5fd25d66..d1f771b2 100644
--- a/nanobot/agent/tools/sandbox.py
+++ b/nanobot/agent/tools/sandbox.py
@@ -33,7 +33,7 @@ def _bwrap(command: str, workspace: str, cwd: str) -> str:
         "/lib64",
         "/etc/alternatives",
         "/etc/ssl/certs",
-        "/etc/pki/tls",
+        "/etc/pki/tls/certs",
         "/etc/pki/ca-trust",
         "/etc/crypto-policies",
         "/etc/resolv.conf",