The permission decision system now supports a sandboxOverride reason type, allowing sandbox-level permission overrides to be distinguished from regular permission grants in the UI and telemetry.
Evidence
Sandbox override (search for "sandboxOverride")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.