A sandbox locks its network to one host when it starts, but a restarted server rebuilds its config from today's settings. Change the setting mid-run and the adopted job calls a host its own sandbox now blocks.
Store what you sealed beside what you sealed. A new process must see the old state, not guess it from its own config.
Test the path a change exists for. Not only the paths it must leave alone.
Test the path a change exists for. Not only the paths it must leave alone.