[troyjfarrell]

Perhaps more so than one-click services, Sandstorm is a platform for securely hosting web apps. It succeeded in making apps (called grains) easy to use, but not in making them easy to package or develop.

Sandstorm provides security by sandboxing applications and giving them a capability-based API (via Cap'n Proto RPC over a unix socket) for connecting to the outside world and other grains. Grains can also export capabilities, which would allow for the pluggable modules envisioned by kayson. Sadly, few grains do this as of yet. In my limited experience with this part of Sandstorm, the developer experience is still rough around the edges.