Module execution 

Trusted-host ownership of ephemeral sandbox operations. Dropping a model stream cancels its operation, not the task that owns creation and cleanup. Unknown create/destroy outcomes are retained; mutations are never replayed.

Structs

SandboxOperationSnapshot

Host diagnostics contain identities and state, never code, env or output.

SandboxRun

A run’s request handle. Only the supervisor can mint this scope.

SandboxRunLease

Owned by the executing run future, not its tools. Unwind closes admission; the supervisor retains outstanding jobs until an async drain joins them.

SandboxSupervisor

Manager-owned registry. Failed receipts remain available to later shutdown calls and diagnostics; a second drain cannot turn uncertainty into success.

Enums

SandboxExecutionError

Model-safe failure. Backend bodies remain in the error chain, not Display.

SandboxOperationPhase

Content-free lifecycle state for an operation owned by the host.