Overview

A five-layer architecture that runs untrusted code inside a hardened Linux sandbox — isolated, resource-capped and fully observable. Every page shares this nav, language and theme.

5Core components
4Isolation layers
8Namespace types (kernel 6.1)
6Lifecycle steps

System Architecture

Five layers, top to bottom — from the browser down to the kernel-level sandbox.

Core Components

The five building blocks. Click any card for detail.

Task Lifecycle

What happens between 'submit code' and 'see results'.

Isolation Mechanisms

The four kernel-level controls inside the Sandbox Executor. Click for detail.

Design Principles & Context

Why the system is shaped this way — and how it compares to the field.

Learning Paths by Role

Want to help build a system like this? Here's what each role learns — and to what depth.

Glossary

Search the terms used across this site.

Quick Quiz

Six questions on the architecture. Score is session-only — refresh to reset.

Flashcards

Tap a card to flip it. Term on the front, meaning on the back.