The system design documentation specifies a 512MB RAM and a 64 PID sandbox limit. However, the actual docker run commands in buildExecutor.ts and repositoryCompiler.ts do not pass --memory 512m or --pids-limit 64 configuration flags, meaning sandboxes are running with unrestricted host resources.
The system design documentation specifies a
512MB RAMand a64 PIDsandbox limit. However, the actualdocker runcommands inbuildExecutor.tsandrepositoryCompiler.tsdo not pass--memory 512mor--pids-limit 64configuration flags, meaning sandboxes are running with unrestricted host resources.