Since you already seem to be a fan of Python, how about CardStock? https://cardstock.run https://cardstock.run There's also Decker, which by default is tightly

Since you already seem to be a fan of Python, how about CardStock? https://cardstock.run https://cardstock.run There's also Decker, which by default is tightly sandboxed but has opt-in APIs for filesystem IO, invoking external processes, etc: http://beyondloom.com/decker/ http://beyondloom.com/decker/