Clarify when sandboxing is enabled.
PiperOrigin-RevId: 386445443
diff --git a/site/docs/user-manual.html b/site/docs/user-manual.html
index 7796002..ba1df96 100644
--- a/site/docs/user-manual.html
+++ b/site/docs/user-manual.html
@@ -909,7 +909,9 @@
<code>sandboxed</code> causes commands to be executed inside a sandbox on the local machine.
This requires that all input files, data dependencies and tools are listed as direct
dependencies in the <code>srcs</code>, <code>data</code> and <code>tools</code> attributes.
- This is the default on systems that support sandboxed execution.
+
+
+ Bazel enables local sandboxing by default, on systems that support sandboxed execution.
</li>
<li>