System Architecture
Five layers, top to bottom — from the browser down to the kernel-level sandbox.
Data flows top to bottom: each layer hands off to the next, and the untrusted code only ever runs at the guarded core. Each layer has one job, so a failure (or a hostile workload) stays contained instead of spreading.
Frontend UI
Upload, launch, view results
File uploadSandbox launchResult display
Database
Temporary & result store
Job (ID / Status)ResultsLogs
Job Manager
Dispatch · monitor · return
Dispatch to nodesMonitor statusReturn resultsStore to Sandbox
Sandbox Executor
Runs untrusted code under four kernel-level controls
Linux NamespaceSeccomp-BPFCgroupsTimeout
Monitoring & Logs
Observe everything, touch nothing
Live resource metricsAnomaly alertsLog query