Sandboxed Elixir evaluation with AST-level safety checks.

Evaluates Elixir code strings in a spawned process with:

• AST validation — before evaluation, the code is parsed and walked to reject dangerous forms (defmodule, import, spawn, send, receive, etc.) and calls to modules not in the allow-list.
• Module allow-list — only built-in safe modules (Kernel, Enum, Map, String, …) and explicitly passed modules may be called. If only some functions from a module should be exposed, wrap them in a dedicated facade module.
• Timeout and resource limits — evaluation runs through Legion.Sandbox.Runner, which kills it on timeout or exceeded memory / CPU budgets.

Examples

iex> {:ok, {4, _}} = Legion.Sandbox.Elixir.execute("2 + 2", 5_000)

iex> {:ok, {6, _}} = Legion.Sandbox.Elixir.execute("Enum.sum([1, 2, 3])", 5_000)

iex> {:error, msg} = Legion.Sandbox.Elixir.execute("System.halt()", 5_000)
iex> msg =~ "Module System is not allowed"
true

iex> {:error, msg} = Legion.Sandbox.Elixir.execute("import Enum", 5_000)
iex> msg =~ "import is not allowed"
true