How was the sandbox implemented? Just a one-off Docker container execution or something more substantial?