sandbox model update

Functional, no isolation implemented yet