Architecture
Host Functions Break the Sandbox: How to Design Isolation Boundaries for WASM Plugins
Based on the insight that the effective security boundary of a WASM sandbox is determined not by the runtime's linear memory isolation but by the set of functions exposed by the host, this piece concretely addresses how to minimize the host function exposure surface, structure memory boundaries, and design defenses against multi-tenant resource exhaustion.
September 17, 202623 min read
