The agent obviously knows the Train Man.
replySandboxes are almost never perfect. There are always ways to smuggle data in or out, which is kind of logical: if they were perfect then there would be no result.
reply> if they were perfect then there would be no result.
replyYou shutdown the sandbox and access the data from the outside.