[josefx]

Have a system were you wxpect the sandboxing to work and have an automated check that it compiles there?

[ptx]

Part of the backdoor was in the tests. The attacker in this case could easily have sabotaged the test as well if a test was required.