I think basedir like functionality is a good idea, but this is not the languages responsibility, this is an operational concern. There's too many ways around i

I think basedir like functionality is a good idea, but this is not the languages responsibility, this is an operational concern. There's too many ways around it if you're trying to do this in a language ... for example, limiting checks on the open() call would be relatively straight forward, but what about people who use syscalls directly from the language? Or what about shelling out to another process? Chroot jails get kind of close of this in a very broad/blunt way, but back to my original point: This is not the languages responsibility