Agoric SES

Mark S Miller (aka @erights) had earlier indicated that in light of Meltdown/Spectre. Dr. SES needed a rewrite. Here we see it progress, with an extensive demo and a secure @warner on bugs.

"Secure EcmaScript (SES) is a frozen environment for running EcmaScript (Javascript) 'strict' mode programs with no ambient authority in their global scope, and with the addition of a safe two-argument evaluator (SES.confine(code, endowments)). By freezing everything accessible from the global scope, it removes programs abilities to interfere with each other, and thus enables isolated evaluation of arbitrary code. It runs atop an ES6-compliant platform, enabling safe interaction of mutually-suspicious code, using object-capability -style programming."