Under the hood
New sandbox internals track per-file identity for lanes, with no visible caller yet
What
A sandbox file-lane class gains two new methods, stashIdentity and takeIdentity, which track a per-path device/inode identity using an LRU-style (least-recently-used) eviction cache. If the eviction-tracking set overflows, the lane enters a 'poisoned' state.
Why
No code calling these new methods is visible in this change, so it's unclear what feature this identity tracking supports yet.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
No caller of stashIdentity/takeIdentity is visible, so what feature this supports is not established.