The cell side of HotCell. A supervisor listens on two Unix sockets, forks a worker per request, holds each worker to a wall-clock deadline and a set of resource limits, and answers for one that dies without reporting. An operation subclasses HotCell::Operation, declares its limits, and implements perform. This gem deliberately depends on no application framework: nothing about it loads ActiveSupport, because a sandbox should carry only what the conversion needs.