Struct SandboxLimits 

pub struct SandboxLimits {
    pub cpu: String,
    pub memory: String,
    pub disk: String,
    pub max_processes: Option<u32>,
}

Hard ceilings enforced on a sandbox.

These are limits, not scheduling requests. Untrusted code does not respect a hint, so every field is enforced by the platform and a platform that cannot enforce one is rejected at plan time rather than silently ignoring it.

Fields

cpu: String

CPU ceiling in cores or millicores (e.g. "1", "500m")

memory: String

Memory ceiling (e.g. "2Gi", "512Mi")

disk: String

Disk ceiling (e.g. "20Gi")

max_processes: Option<u32>

Maximum number of processes, which bounds fork bombs.

Optional because only a container runtime has the primitive: Kubernetes sets a pid ceiling per node, not per pod, and neither AWS MicroVMs nor Azure sandboxes expose one. Declaring it on a platform that cannot apply it is refused at plan time.

Trait Implementations

impl Clone for SandboxLimits

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxLimits

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SandboxLimits

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SandboxLimits

impl PartialEq for SandboxLimits

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SandboxLimits

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SandboxLimits