That's the alarming thing about this result: they did run the model in the sandbox, in the sense that they believed there was no internet access for the model.
“Against the sandbox” and “on the sandbox” are not the same thing.
“Against the sandbox” and “on the sandbox” are not the same thing.