pub const SANDBOX_ATTESTATION: &str = "vgr-checker-runs-in-deployment-sandbox";Expand description
The operator’s attestation that a deployment sandbox confines this checker.
Required verbatim, because everything this module does not enforce — memory, CPU, network, filesystem reach — is only enforced if something else is doing it. Making that an explicit claim keeps a checker from being configured on a bare host under the impression it is contained.