Sorry, but it’s also beyond my understanding. As far as I can understand, run0 doesn’t use a sandbox, but will better isolate the privileged processes from unprivileged ones when executing a command.