ReadonlyegressNetwork egress the run attempted. With RunScriptOptions.recordEgress: every (blocked) attempt the proxy saw. With RunScriptOptions.egress: the allowlisted hosts actually reached, with packet counts. Empty otherwise.
Optional ReadonlyegressAllowlisted-egress mode only: aggregate off-allowlist traffic the packet wall dropped. Undefined when RunScriptOptions.egress was unset.
ReadonlyexitExit code. A signal-killed run reports 1.
Optional ReadonlyfilesFiles written to the work dir (relative paths). undefined when writes
were never recorded — a different fact from [] ("recorded, wrote
nothing"). Recording diffs the work dir before and after, which only a
CONFINED run does. assertNoWrite / assertWroteOnly refuse undefined
rather than pass having inspected nothing.
ReadonlystderrEverything the program wrote to fd 2. Advisory output usually lives HERE — a runner that reads only stdout silently discards it.
Readonlystdout
What a program did: its exit, its output, and (when confined) its effects.