Sample and sandbox wallet keys are platform-minted on testnet and the platform may sign from them — do not treat a sample seat as exclusively held; self-custody seats (your own withdrawal_address) are unaffected and the platform never holds their keys.