Where can a project “escape” the app sandbox?
Perhaps checks that the app sandbox is active for:
app target builds
test target builds
framework target builds
…?