Struct SpawnSpec 

pub struct SpawnSpec<'a> {
    pub worker: &'a Path,
    pub jail: &'a Path,
    pub mode: &'a str,
    pub limits: &'a Limits,
    pub seccomp: bool,
}

What one adapter invocation needs from a backend.

Fields

worker: &'a Path

Absolute path of the worker binary.

jail: &'a Path

Absolute path of the per-run jail directory.

mode: &'a str

The worker mode to execute after sandbox setup.

limits: &'a Limits

Resource limits the helper applies before exec.

seccomp: bool

Whether the syscall filter layer engages. Always true for adapter work. The network probe disables it once, on Linux, to observe namespace denial directly, and a second probe stage proves the filter kills socket creation.