Dancing mad with sandboxing

Kefka is a Go-native shell sandbox that includes coreutils and Python running via WebAssembly. The article details the technical challenges and design decisions behind building this sandboxing tool.