Dan Connolly

https://github.com/jart/pledge [8693ebe](https://github.com/jart/pledge/commit/8693ebe15a30bd4235165ad72a469da29ca067cf) [3 weeks ago](https://github.com/jart/pledge/commit/8693ebe15a30bd4235165ad72a469da29ca067cf) [Porting OpenBSD pledge\(\) to Linux](https://justine.lol/pledge/) July 13th, 2022 @ [justine's web page](https://justine.lol/index.html) > pledge() actually makes security comprehensible

Lunatic: an Erlang-inspired runtime for WebAssembly

1

I hope to kick the tires on this thing soonish: > By combining the fault-tolerance and massive concurrency of Erlang with the capability-based security of WebAssembly, it creates a powerful...

endo daemon with rspace / rhovm storage

8

> initial work on pet-named workers, storage, and values to the Endo Daemon and expose them with its CLI https://github.com/endojs/endo/pull/1413 w.r.t. storage... is it just bytes? I wonder about rspace...

https://blog.cloudflare.com/workerd-open-source-workers-runtime/#capability-bindings-cleaner-configuration-and-ssrf-safety

https://wyvernlang.github.io/

capabilities in chialisp? (search my tweets)

1

I had an exchange with braham cohen about this... how do I find it? Without relying on twitter's services? I have an archive of my tweets... If I just put...

usable traces across workers

1

## What is the Problem Being Solved? With the endo daemon coordinating several workers, errors usually result in unhelpful stack traces that basically say "I got an Error over CapTP":...

@endo/far depends on @fast-check/ava via pass-style

1

I was trying to `endo bundle ./src/txSync.js` where the only import is `@endo/far` and I got: ``` (Error#1) Error#1: Cannot find dependency ava for file:///home/connolly/projects/finquick/packages/fincaps/node_modules/@fast-check/ava/ at gatherDependency (packages/compartment-mapper/src/node-modules.js:447:11) ... ```...

docs say lockdown() freezes globalThis

3

https://github.com/endojs/endo/blob/f891df0cb180d2296ae9f671af10fcdc8b24b209/packages/ses/docs/reference.md?plain=1#L85-L87 cc @tgrecojs @erights

Package name integrity in compartment maps, lavamoat policies

6

At time of writing, the Endo compartment-mapper’s `compartmentMapFromNodeModules` utility generates a compartment map for a Node.js application as described on disk, as laid out presumably by a Node.js package manager....