Namespace DotBoxD.Hosting
Namespaces
Section titled “Namespaces”Classes
Section titled “Classes”Reference DotBoxD.Hosting.ISandboxWorkerClient that bridges a worker request to a worker-side
DotBoxD.Hosting.Execution.SandboxHost. The worker independently re-prepares the plan from the transmitted
module and policy instead of trusting the requesting host’s signed plan, then executes it with
the supplied (in-process) options. When the worker is hosted in a separate process, container,
or restricted account, this provides a real out-of-process boundary with a documented envelope.
Interfaces
Section titled “Interfaces”Advanced SPI for wiring DotBoxD.Kernels.SandboxIsolation.WorkerProcess to a real out-of-process
boundary. A consumer implements the transport/process lifecycle and runs the requested plan on
the worker side. The host re-validates the returned result envelope before publishing it, so a
misbehaving worker fails closed rather than escaping the sandbox contract.