It is stated that "every time Windows Sandbox runs, it’s as clean as a brand-new installation of Windows", so it seems that such an app could simply look for the presence of any non-bundled software or any non-default settings to get a rough idea.