Run untrusted user code in your product

Cap everything at create time

sb = Sandbox.create(
    template="python-3.11",
    vcpu=1, memory_mb=512, storage_mb=1024,   # hard resource walls
    timeout=30,                                # hard deadline — reaped after 30 s
)

Execute with a per-command timeout too

r = sb.run(user_code_command, timeout=10)
verdict = {"stdout": r.stdout, "exit": r.exit_code}
sb.kill()   # nothing survives the request

Why this is safe

Each sandbox is a dedicated microVM — its own kernel, not a shared-kernel container. Escapes that work on containers hit a hardware virtualization boundary here. Server-side plan limits cap concurrency and resources even if your own service has a bug.