Fix bug whereby SOAAP was not checking system calls within the top-level of a sandboxed region (i.e. call depth 0).

The Sandbox class now provides easy access to all call instructions that may occur within the sandbox.