???
Sandboxed files invoking HIPS outside of the sandbox?
Are the changes really being done? I mean, the sandboxed applications really try to change real files outside of the sandbox and trigger the HIPS?
How does it work?