[lenkite]

Are there languages and runtimes which have done stuff at this low-level before ? Sandboxing at the individual function level ?

[nesarkvechnep]

There's Capsicum on FreeBSD.

[mcdonje]

seL4 is an operating system that uses capabilities