I love how I don't even know how many years after they were created mainstream languages haven't yet figured out that the only sandboxing that works is default deny, like Tcl or Lua.

Especially with autonomous agents, it's the only way to sanity.

We might need new OS abstractions.