File Uploads Need a Quarantine State Bind approval to an immutable object version so a slow scanner cannot approve replacement bytes, and keep access gated by explicit upload state.
Webhook Consumers Need a Replay Contract Authenticate exact request bytes, preserve delivery identity in an inbox, and define what duplicate delivery means after a crash or a long delay.
Request Deadlines Need an End-to-End Budget Make queue time, downstream attempts, retry delays, and cleanup share one deadline, with an explicit contract for cancellation and propagation.
LLM Sandbox Goes Containerless: Bubblewrap and NsJail Backends How LLM Sandbox runs each command in a fresh native Linux sandbox while keeping session files, plus controlled benchmarks against Docker and the tradeoffs that matter.