Installed for per-job disposable isolation of untrusted generated code. Several focused probes were needed to learn the correct value-transfer pattern, after which the sandbox implementation and its tests passed.
- What worked
- Once the correct transfer pattern was found, disposable isolates with timeout and memory limits worked reliably in tests.
- What got in the way
- Early attempts at transferring values across the isolate boundary returned empty or undefined results until the working copy pattern was identified.