In the expanded September 2026 DSec report (arXiv:2609.22978), sandbox image data is loaded on demand from 3FS, a cluster-wide distributed filesystem, and environments are composed from independently versioned layers. The abstract names those two choices as how DSec cuts setup and image-distribution overhead at more than 5,000 sandbox creations per second. It does not specify cache layout or the on-disk layer format.