in that case we need a block of system memory marked as unsafe so i can run these programs in it encapsulated

perhaps we could call it a sedimentchest?

I think that’s just called “memory”. Encapsulation is your machine.