new differ implementation which supports sandboxing checker implementations.
no whitelisting now
todo for monitor