You'll notice Notable
Sandboxed Java processes now automatically route through the sandbox's proxy via an injected agent jar.
Network-sandboxed commands now look for a bundled srt-proxy-agent.jar and inject it into Java processes via -javaagent, merged into JAVA_TOOL_OPTIONS, so JVM subprocesses route through the sandbox's HTTP/SOCKS proxy. This applies on both the Linux (bwrap) and macOS (sandbox-exec) sandbox code paths; if the jar isn't found, a warning is logged and the process continues without it.