Python code runs with the normal permissions of the container process. Use it only with trusted clients and treat Docker as the isolation boundary. execute_python(code, timeout_seconds=None, ...