Struct SandboxLimits 

pub struct SandboxLimits {
    pub wall_clock: Duration,
    pub cpu: Duration,
    pub memory_bytes: u64,
    pub max_open_files: u64,
    pub allow_network: bool,
}

Resource limits enforced on the child process (T080 / FR-017).

Defaults are pinned by FR-017:

Limit	Default	Rationale
wall_clock	120 s	Real-time deadline enforced by parent.
cpu	60 s	RLIMIT_CPU seconds.
memory_bytes	1 GiB	RLIMIT_AS address space cap.
max_open_files	256	RLIMIT_NOFILE hard + soft.
allow_network	false	Linux: unshare(CLONE_NEWNET).

On macOS unshare is unavailable and the network-off invariant degrades to “child has no configured provider” — documented as a known limitation in specs/043-evals-adv-features/research.md §R-006.

Fields

wall_clock: Duration

Real-time deadline. The parent SIGKILLs the child on expiry.

cpu: Duration

CPU seconds via RLIMIT_CPU. Child receives SIGXCPU on expiry.

memory_bytes: u64

Virtual address space ceiling via RLIMIT_AS.

max_open_files: u64

File-descriptor ceiling via RLIMIT_NOFILE.

allow_network: bool

Whether the child may open external network connections.

Trait Implementations

impl Clone for SandboxLimits

fn clone(&self) -> SandboxLimits

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxLimits

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxLimits

fn default() -> Self

Returns the “default value” for a type.