> While we do need to write sandbox metadata and results to durable storage, we do so largely asynchronously.

How do you guarantee durability of sandbox task metadata if it’s written to durable storage async? What if the node it’s scheduled on goes down right after scheduling completes - what service durably knows about the intended state of the sandbox and retries scheduling?