The pure safe-by-default policy. Untrusted code NEVER runs unconfined unless the caller explicitly opted out (mode: false). This is the whole security contract, isolated as a pure function so it is exhaustively unit-tested.
mode: false
The pure safe-by-default policy. Untrusted code NEVER runs unconfined unless the caller explicitly opted out (
mode: false). This is the whole security contract, isolated as a pure function so it is exhaustively unit-tested.