Repository navigation
Security model: sandboxing, import trust, and safe execution docs #150
Description
Problem
There is no defined security model for NLS. It is unclear what a .nl file can and cannot do at runtime, what trust boundaries exist for @use imports, or how to safely run untrusted .nl files.
Acceptance Criteria
-
docs/SECURITY.mddefining: execution sandbox model, import trust levels, what system access .nl has -
nlsc run --sandboxflag that restricts filesystem/network access if applicable - Import trust: stdlib vs user packages vs third-party have documented trust levels
- Responsible disclosure policy
Why This Blocks v1.0
Production adoption requires knowing what you're trusting when you run a .nl file.
Activity