Struct SpawnSpec 

pub struct SpawnSpec<'a> {
    pub worker: &'a Path,
    pub jail: &'a Path,
    pub mode: &'a str,
    pub limits: &'a Limits,
    pub seccomp: bool,
    pub exec_grants: &'a [PathBuf],
    pub read_grants: &'a [PathBuf],
    pub runtime_profile: RuntimeProfile,
    pub provider: Option<&'a ProviderJail>,
}

What one adapter invocation needs from a backend.

Fields

worker: &'a Path

Absolute path of the worker binary.

jail: &'a Path

Absolute path of the per-run jail directory.

mode: &'a str

The worker mode to execute after sandbox setup.

limits: &'a Limits

Resource limits the helper applies before exec.

seccomp: bool

Whether the syscall filter layer engages. Always true for adapter work. The network probe disables it once, on Linux, to observe namespace denial directly, and a second probe stage proves the filter kills socket creation.

exec_grants: &'a [PathBuf]

Literal files the jail additionally grants read and execute on: the pinned engine and probe binaries. Never a directory.

read_grants: &'a [PathBuf]

Literal files the jail additionally grants read on: the pinned weights and other read-only runtime files. Never a directory.

runtime_profile: RuntimeProfile

The measured jail profile this worker mode is authorized for.

provider: Option<&'a ProviderJail>

The provider jail’s measured parameters, present only for the provider class. The class is the authorization and these are the necessity: without them the provider profile renders nothing wider than the base, so no other worker can reach the widened allowances by naming the class alone.