Expand description
The process contract (ProcessRunner) over the local machine (B1).
The allowlist is the security boundary, and it is enforced here in Rust before anything reaches the operating system — exactly what the shared contract test checks. There is no general shell: a program that is not configured is refused with a permission error, and the arguments are passed as a vector, never through a shell string, so there is nothing to quote-escape.
Structs§
- StdProcess
Runner - Runs allowlisted programs with
tokio::process.