Surprised that Genode isn't mentioned in this context: https://genode.org https://genode.org Ok it's not a language-based approach. But interesting project ai

Surprised that Genode isn't mentioned in this context: https://genode.org https://genode.org Ok it's not a language-based approach. But interesting project aiming for similar goals as discussed in the article. And a nice counter-example to: "Not one OS has a sandboxing API that is all of documented, stable and usefully powerful"