Description
Untrusted programs can be executed inside a controlled sandbox that limits their access to the host system.
It is useful for programming contests, graders, malware-adjacent research labs, or test runners that execute unknown submissions. Sandboxes reduce risk but are not magic isolation, so keep the host patched and avoid secrets in the execution environment.