↗ zviz Zig Research into low-overhead sandboxing for untrusted code. An OCI-compatible Zig runtime that lets 132 syscalls through natively and denies 24 at seccomp. MIT ★ 1 sandboxing code