Externalized AppSandbox from main