For running trusted code that you wrote and reviewed, Docker with a seccomp profile is probably fine. The isolation is against accidental interference, not adversarial escape.
Материалы по теме:
，这一点在91视频中也有详细论述
（二）违反国家规定，在文物保护单位附近进行爆破、钻探、挖掘等活动，危及文物安全的。。一键获取谷歌浏览器下载对此有专业解读
mergeSortRecursive(arr, left, mid); // 排序左半部分