Are sandbox profiles (or how to use them) officially documented anywhere (as non-deprecated)?

They just got burned by the documented usage of sandbox_init() going away (which didn’t even get a mention in the release notes), I can understand why they’d be unexcited about moving to a different deprecated/undocumented API.