??? Sandboxed files invoking HIPS outside of the sandbox? Are the changes really being done? I mean, the sandboxed applications really try to change real files outside of the sandbox and trigger the HIPS? How does it work?