diff --git a/internal/providers/crownest/backend.go b/internal/providers/crownest/backend.go
index 7eb9bbf71..fd8eac76a 100644
--- a/internal/providers/crownest/backend.go
+++ b/internal/providers/crownest/backend.go
@@ -230,7 +230,7 @@ func (b *backend) Run(ctx context.Context, req RunRequest) (result RunResult, re
 		SourceMeta: map[string]string{
 			"repo": repoName(req.Repo),
 		},
-	}, idempotencyKey("create", randomSuffix()))
+	}, idempotencyKey("create", shared.RandomSuffix()))
 	if err != nil {
 		if acquired && workspaceRun.SandboxID != "" {
 			return RunResult{}, b.cleanupCreateFailure(ctx, api, workspaceRun.SandboxID, err)
@@ -955,7 +955,3 @@ func repoName(repo Repo) string {
 	}
 	return repo.Root
 }
-
-func randomSuffix() string {
-	return shared.RandomSuffix()
-}
diff --git a/internal/providers/opencomputer/backend.go b/internal/providers/opencomputer/backend.go
index 3151930df..d58873f42 100644
--- a/internal/providers/opencomputer/backend.go
+++ b/internal/providers/opencomputer/backend.go
@@ -495,7 +495,7 @@ func newSandboxName(repo Repo) string {
 	if base == "" {
 		base = "crabbox"
 	}
-	return namePrefix + base + "-" + randomSuffix()
+	return namePrefix + base + "-" + shared.RandomSuffix()
 }
 
 func isReadyState(state string) bool {
@@ -518,10 +518,6 @@ func isTerminalState(state string) bool {
 	}
 }
 
-func randomSuffix() string {
-	return shared.RandomSuffix()
-}
-
 // openComputerWorkdir returns the configured absolute workspace path inside the
 // sandbox, validating that it isn't relative, empty, or a broad system path.
 func openComputerWorkdir(cfg Config) (string, error) {
diff --git a/internal/providers/opensandbox/backend.go b/internal/providers/opensandbox/backend.go
index 0bb0ac1f1..17df8624f 100644
--- a/internal/providers/opensandbox/backend.go
+++ b/internal/providers/opensandbox/backend.go
@@ -1011,11 +1011,7 @@ func newSandboxName(repo Repo) string {
 	if base == "" {
 		base = "crabbox"
 	}
-	return namePrefix + base + "-" + randomSuffix()
-}
-
-func randomSuffix() string {
-	return shared.RandomSuffix()
+	return namePrefix + base + "-" + shared.RandomSuffix()
 }
 
 func (b *openSandboxBackend) cleanupContext(ctx context.Context) (context.Context, context.CancelFunc) {
diff --git a/internal/providers/superserve/backend.go b/internal/providers/superserve/backend.go
index f46393574..2c4964ee6 100644
--- a/internal/providers/superserve/backend.go
+++ b/internal/providers/superserve/backend.go
@@ -804,7 +804,7 @@ func newSandboxName(repo Repo) string {
 	if len(base) > 40 {
 		base = strings.Trim(base[:40], "-")
 	}
-	return namePrefix + base + "-" + randomSuffix()
+	return namePrefix + base + "-" + shared.RandomSuffix()
 }
 
 func repoScope(repo Repo) string {
@@ -816,10 +816,6 @@ func repoScope(repo Repo) string {
 	return "repo-sha256:" + hex.EncodeToString(sum[:8])
 }
 
-func randomSuffix() string {
-	return shared.RandomSuffix()
-}
-
 func timeoutOrDefault(primary, fallback time.Duration) time.Duration {
 	if primary > 0 {
 		return primary
diff --git a/internal/providers/vercelsandbox/backend.go b/internal/providers/vercelsandbox/backend.go
index bc91cd763..dc5b331e4 100644
--- a/internal/providers/vercelsandbox/backend.go
+++ b/internal/providers/vercelsandbox/backend.go
@@ -802,7 +802,7 @@ func newSandboxName(repo Repo) string {
 	if len(base) > 40 {
 		base = strings.Trim(base[:40], "-")
 	}
-	return "crabbox-" + base + "-" + randomSuffix()
+	return "crabbox-" + base + "-" + shared.RandomSuffix()
 }
 
 func repoScope(repo Repo) string {
@@ -814,10 +814,6 @@ func repoScope(repo Repo) string {
 	return "repo-sha256:" + hex.EncodeToString(sum[:8])
 }
 
-func randomSuffix() string {
-	return shared.RandomSuffix()
-}
-
 func timeoutOrDefault(primary, fallback time.Duration) time.Duration {
 	if primary > 0 {
 		return primary