Sandboxing and execution isolation

Not written yet

This module is scoped and scheduled but its content has not been written. When it ships it will cover: Deny-by-default egress, ephemeral filesystems, tested kill switches.

Every module in the curriculum is listed from day one so the shape of the whole course is visible. An empty page is more honest than a hidden one.