Command runner, sandbox, output capture, and network allowlist.
This crate provides the execution engine used by the agent orchestrator for spawning commands inside optional sandbox profiles, capturing and sanitizing output streams, and validating network allowlists.