this all seems to be tangled up in some type of bazel sandbox execution thing.. we’re not really bazel experts