diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index a520e480f..f0a568860 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -891,7 +891,7 @@ in
     marksman.sandbox.method = "bunpen";
     marksman.sandbox.whitelistPwd = true;
 
-    mercurial.sandbox.method = "bwrap";  # TODO:sandbox: untested
+    mercurial.sandbox.method = "bwrap";
     mercurial.sandbox.net = "clearnet";
     mercurial.sandbox.whitelistPwd = true;