Clean up legacy runtime naming, sandbox ownership boundaries, and documentation.

Validated by local go test ./... and CI on PR #367.