Hi, one of the authors here. The sandboxed library is indeed exec'd (it's a separate binary), so the only "secrets" that leak into it, are those which are alre

Hi, one of the authors here. The sandboxed library is indeed exec'd (it's a separate binary), so the only "secrets" that leak into it, are those which are already there - compiled into the binary. As for fork/exec: the idea is to preserve the execution context as long as possible - if data leaks between sequences of library API calls are not a problem (e.g. because we just convert some data for internal use), then forking/execve is not necessary. The idea behind 'transactions' (as per Sandboxed API nomenclature) is just that. If potential data leaks between API calls might be a problem, then a fresh instance is spawned via fork (no execve is needed here though).