syntaqxSandboxes choose their outbound interception as they start again, as they did before 5152e1f3: a job that may be given brokered secrets sends its HTTP and HTTPS through egress, any other sandbox has only the abuse-report host intercepted. Naming that host on each sandbox class up front (outboundByHost in a static block) left every cloud runner unable to pick up its job until g1t-runner was rolled back; every sandbox still reaches the internet, with no list of hosts.aef1882History