They run in a container with no network access, no data access other than the project folder.