tiny.sandbox.Audit

1/// Describes the backend configuration that supported an execution result,2/// reported across filesystem, process, network, and environment dimensions.3/// The backend constructs this record directly from the selected runner and run4/// plan rather than from runtime measurements.5///6/// Callers evaluate each dimension independently because one configuration7/// choice implies nothing about another. For example, a Linux Bubblewrap run8/// can establish a private process namespace while still sharing the host9/// network namespace.10pub const Audit = struct {11    runner: Runner = .staging,12    filesystem: Filesystem = .copied,13    process: Process = .host,14    network: Network = .inherited,15    environment: Environment = .inherited,16};

1pub const Audit = audit.Audit;