A sandbox paused for abuse stays paused until support lifts it

When the abuse checks pause or stop a sandbox for traffic only abuse makes, such as reaching a cryptocurrency mining pool, a wake, restart, snapshot or fork of it now answers sandbox_halted (403) saying why, instead of running it again. Its files are kept, and your inbox says what was seen. See Security.