Start copying a live business organization's data for whole months (at most 36), optionally only some sites, into a new sandbox (spec part B). Needs access.manage on the source, in the caller's tenant; a source outside it, or one the caller holds no grant on, is 404. Repeating a requestId with the same body returns the same clone (200). The sandbox stays hidden until the copy finishes; a failed or cancelled copy archives it.

The months and sites select records, and each selected record is copied whole: all of its raw rows, even those outside the chosen months. A copied upload brings its whole original file (a file is evidence and cannot be copied in part), so the file can hold other sites' and other months' data. It also brings every analysis (review) row of that upload; rows for records the clone left behind arrive un-submitted and without a record. Whoever is given the sandbox can see all of this. The start is recorded on the source organization's activity (access.sandbox_clone_data_copied_out). Support sessions are refused (403).