Can't edit anymore, but after discussing with musl developers, even this is inviable, since musl doesn't offer any guarantees on what syscalls are used on diffe

Can't edit anymore, but after discussing with musl developers, even this is inviable, since musl doesn't offer any guarantees on what syscalls are used on different systems. Apparently the only solution is for seccomp to offer a pledge(2)-like system.