PLEX EXPLORER
i
DEF CON — Copilot Studio (Python)
TROOPERS — Dataverse Plugin
gRPC Docs
PLATFORM
Dataverse Application Servers
gRPC
JWT auth
GATEWAY
SandboxManagerService :443
gRPC
Nonce auth
HYPER-V BOUNDARY
HYPER-V BOUNDARY
SandboxCallbackService
chokepoint
IAcquireToken
identity-gated
ITracingService
worker-local
IKeyVaultClient
unrestricted
...
callback
relay
WORKER
SandboxWorker.exe :9000
Plugin A
Plugin B
Plugin ...
User: ContainerAdministrator
gRPC
No auth
SIDECAR
SidecarService
COPILOT STUDIO
Python Code Interpreter
gRPC
JWT auth
GATEWAY
Power Platform gateway :443
gRPC
No auth
HYPER-V BOUNDARY
WORKER
Code Interpreter · MiddleEarth
CodeInterpreterGrpcServiceShim.exe → CodeInterpreterShim.exe
runs as ContainerUser
click to trace a code execution request ▾
CodeInterpreterGrpcServiceShim.exe
→ YARP reverse proxy
CodeInterpreterShim.exe
→ python server.py
make_sandbox()
restricted
exec(user Python)
in-proc
connector_client
SIDECAR
SidecarService
COPILOT STUDIO
Python Code Interpreter
user prompt + file
Prompt LLM
code-gen · guardrail · response