Modules§
- daemon
- Guest-side daemon lifecycle: signal handling, interceptor install, pidfd process tracking, and the poll event loop. One orchestration flow whose helpers are tightly coupled to it (documented exemption, per the modularization guide 1/8).
- entry
- Guest sandbox entrypoint: the single
run()flow plussetup_user. One cohesive concern (documented exemption, per the modularization guide 1/8). - error
- interceptors
- protocol
- socket