How does Hikugen sandbox, constrain, and audit the LLM-generated Python extraction code to prevent arbitrary code execution (e.g., filesystem writes, network eg

How does Hikugen sandbox, constrain, and audit the LLM-generated Python extraction code to prevent arbitrary code execution (e.g., filesystem writes, network egress, or imports outside stdlib), and does it enforce a deterministic execution environment (via AST rewriting, syscall filtering, seccomp profiles, or a WASM/Python sandbox) to guarantee that regenerated scrapers cannot drift into unsafe or non-reproducible states?