...

1. Restrict access a user-defined code to internal API of Ignite:
   a. Restrict internal package access;
   b. Encapsulation of IgniteKernal.
2. Execution a user-defined code in the Ignite Sandbox for the following features:
   a. Continuous Queries;
   b. IgniteMassaging;
   c. ServiceGridIgniteEvents.

Risks and Assumptions

The existing implementations of interfaces Runnable, IgniteRunnable,
Callable.class, IgniteCallable, ComputeTask, ComputeJob, IgniteClosure, IgniteBiClosure, IgniteDataStreamer, IgnitePredicate,
IgniteBiPredicate cannot cast the instance of Ignite to IgniteEx or IgniteKernal if the Sandbox is enabled.

...