The caller-owned sandbox that compiles WASM bytes into a runnable Op; the caller retains ownership and must close() it (see above).
close()