A hardened, zero-dependency execution sandbox and subprocess guard for Python 3.10+ that enforces process-tree timeouts, output buffer caps, and path jailing on every LLM tool call.