The switch that was connected to nothing
A configuration option that the schema accepted, the docs described, the types exported — and that nothing read. The agent started, produced nothing, and reported success.
Blog
Notes on building the sandbox: what we measured, what we changed, and why.
Isolation is almost free once you are inside it
Running a command inside a hardware-isolated virtual machine takes 5.6 milliseconds. Inside a plain process jail it takes 3.7. Almost the entire cost of the wall is in building it, not in living behind it.
The run that never ended
A shell command exited in seven milliseconds. The run it belonged to was still going ten minutes later. The bug was in what we were waiting for.