Namespace DotBoxD.Hosting

SandboxHostWorkerClient: Reference ISandboxWorkerClient that bridges a worker request to a worker-side SandboxHost. The worker independently re-prepares the plan from the transmitted module and policy instead of trusting the requesting host's signed plan, then executes it with the supplied (in-process) options. When the worker is hosted in a separate process, container, or restricted account, this provides a real out-of-process boundary with a documented envelope.

ISandboxWorkerClient: Advanced SPI for wiring WorkerProcess to a real out-of-process boundary. A consumer implements the transport/process lifecycle and runs the requested plan on the worker side. The host re-validates the returned result envelope before publishing it, so a misbehaving worker fails closed rather than escaping the sandbox contract.