Sandboxed runner — operator-only. ▶ Run executes only with the operator credential plus a distinct second approver; anonymous runs answer BLOCKED and nothing executes. When authorized, Python runs in the Space's constrained sandbox (allow-listed binaries, no network, 30s, isolated dir).