sandboxing tree