Behaviour for trusted external code-sandbox adapters.

Implementations must execute outside the BEAM node in a sandbox that enforces its own filesystem, network, CPU, memory, and process limits. This behaviour deliberately provides no local shell or eval fallback.