{"version":"2.1.227","anchor":"sandbox-and-container-detection-folded-into-one-cached-probe","canonical_anchor":"sandbox-and-container-detection-folded-into-one-cached-probe","heading":"Sandbox and container detection folded into one cached prober","tier":"internal","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.227\/e\/sandbox-and-container-detection-folded-into-one-cached-probe","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.227","markdown":"### Sandbox and container detection folded into one cached prober\n\nDocker, bubblewrap and root-outside-sandbox checks share one cached prober that answers false until ready.\n\n**What**\n\nDocker, bubblewrap, running as root outside a deliberate sandbox, and \"contained with no internet\" checks now live in a single class that caches each probe. One gate additionally requires an internal-network probe to come back empty. Its synchronous accessor reports false until the asynchronous checks have settled, so very early callers see the negative answer. The bubblewrap and `IS_SANDBOX=1` signals are Linux-only.\n\n**Evidence**\n\n`passesAntDspEnvGateSync`\n\n- Area: Sandbox\n- Names: `IS_SANDBOX`\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 2\/5"}