Module verifier 

Governed verifier sandbox: compiler/test/lint processes run inside an OS process sandbox with a deny-network profile and a read allow-list (toolchain roots, no credentials). Extracted from the candidate so the sandbox policy has one home.

Structs

VerifierTimeouts

Per-stage wall-clock limits for governed verifier processes ([verification] stage_timeout_secs plus per-stage overrides).