Goboxd is a high-performance, security-hardened code execution engine built in Go. Designed to safely run arbitrary untrusted user code, it executes tasks inside an nsjail sandbox with strict per-request CPU time limits, memory caps, cgroups v2 resource accounting, and isolated network namespaces.
Built under intense hackathon conditions across 117 commits and expanding from 11 to 16 languages via a zero-downtime YAML registry. We engineered a comprehensive GitHub Actions CI/CD pipeline running 172 automated tests (34 unit, 138 integration), patched 10 critical security vectors (including path traversal and TOCTOU exploits), and resolved silent client timeouts under stress by aligning queue timeouts with execution limits—tripling request success rates.
View on GitHub
View on GitHub