Sandboxing with minimal effort
Summary
Overview of a minimal-effort sandboxing approach using container isolation and OS-level sandboxing primitives. Includes a practical Inko sandbox API example and discusses trade-offs across Linux, macOS, and BSD.