I/O can be sandboxed via flags. For example, see these CLI flags: https://pkl-lang.org/main/current/pkl-cli/index.html#common-options https://pkl-lang.org/main

I/O can be sandboxed via flags. For example, see these CLI flags: https://pkl-lang.org/main/current/pkl-cli/index.html#common-options https://pkl-lang.org/main/current/pkl-cli/index.html#common-... And when using the different language bindings, you can specify sandboxing options directly in that library.