[curryhoward]

> Code has limited CPU available as well - if it tries to use too many cycles it quits with an error

That's a pretty strange failure mode. Usually you'd just throttle the sandboxed application (e.g., give it a CFS quota with a CPU cgroup) or give it a limited number of vCPUs.

[circuit10]

But then it could just keep running forever which isn’t something you’d want

[curryhoward]

That's what (4) is for. Time out after some duration.