{"version":"2.1.227","anchor":"root-outside-sandbox-detection-folded-into-one-class","canonical_anchor":"root-outside-sandbox-detection-folded-into-one-class","heading":"Root-outside-sandbox detection folded into one class","tier":"internal","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.227\/e\/root-outside-sandbox-detection-folded-into-one-class","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.227","markdown":"### Root-outside-sandbox detection folded into one class\n\nRoot-outside-sandbox and container checks moved into one class with a hardcoded Linux platform.\n\n**What**\n\nThe check for running as root outside a deliberate sandbox, along with the related container and environment-gate checks, now lives in a single class with its inputs injected rather than read directly. The platform value passed in is the literal \"linux\", so the class's non-Windows guard is always satisfied here.\n\n**Evidence**\n\n`isRootOutsideDeliberateSandbox`\n\n- Area: Sandbox\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5"}