property SandboxRecoveryResult.outcome
Recovery outcome:
"clean", "repaired", or "still_poisoned".
clean: nothing to do. Either the sandbox dir didn’t exist or contained only whitelisted entries.repaired: non-whitelisted entries were found and successfully removed. The runner is usable for the next job.still_poisoned: non-whitelisted entries were found and at least one could not be removed. Caller should signal the runner unhealthy.
property SandboxRecoveryResult.remaining
Sorted names of sandbox-base entries that survived the removal attempt. Only non-empty when
outcome == "still_poisoned".
property SandboxRecoveryResult.removed
Sorted names of sandbox-base entries that were successfully removed. Empty when
outcome == "clean".
