sandbox: An development area for making changes to (PAN) templates. Each sandbox must be started from a `domain` and hosts or clusters may be _managed_ into the sandbox to allow for pre-deployment testing. Once the template code is fully tested, it must be _published_ back to the broker and then _deployed_ to the shared domain.