[rirze]

You could use starlark but I don't have context for what you're using Python for specifically. Starlark has stronger hermetic guarantee.