[mike_hock]

Is it easily sandboxable, i.e. can you block or virtualize any file system and other non-memory resource access?

[vtereshkov]

Umka has a limited support for sandboxing, i.e., you can block the file system and disable executing native code from external libraries.