What runs commands for a SandboxBackend (F2's workspace sandbox): it only runs. The backend wraps every run in C4's guard, so a runner cannot run a command twice on replay by mistake.
Runs command in workdir, for at most timeout, capturing at most maxOutputBytes of each of stdout and stderr (bytes of the stream as a JSON string, as ExecResult is recorded) and discarding the rest, with truncated set: the bound holds while the output is read, not after it is all in memory (rule 12). The backend cuts anything over it again.
Runs command in workdir, for at most timeout, capturing at most maxOutputBytes of each of stdout and stderr (bytes of the stream as a JSON string, as ExecResult is recorded) and discarding the rest, with truncated set: the bound holds while the output is read, not after it is all in memory (rule 12). The backend cuts anything over it again.