internal/

Package acceptance shares the signed execution time boundary.

Package capture retains declared sandbox files as restricted evidence.

Package containment binds workers and payloads to one job service cgroup.

Package evidencedb owns a private SQLite evidence store for the broker.

Package hostfs opens trusted worker directories without following aliases.

Package image stages approved OCI image filesystems without running code.

Package journal opens private, exclusively owned SQLite journals.

Package service manages the host service boundary for sandbox recovery.

Package staging prepares verified evidence files without granting execution.

Package supervisor owns one sandbox's bounded worker lifecycle.

Package verifiedio provides bounded content copying for worker staging.

Package worker assembles one authenticated sandbox execution attempt.

Package workerpeer authenticates local worker process identity.

Package workerstore persists worker ownership without granting execution.

Package workspace bounds temporary worker storage independently of job output.