Unsandboxed runner — operator-only. ▶ Run executes only with the operator credential plus a distinct second approver; anonymous runs answer BLOCKED and nothing executes. When authorized, Python or JavaScript runs as the server's own user with the workspace as its working directory, a minimal environment and an 8s timeout. It is NOT sandboxed: no resource limits, no network isolation and no filesystem isolation.