How Sandstorm Works: Containerize data, not services
This is very interesting. It combines a number of older ideas. Even the core idea behind their service, IIRC, existed in commercial products and academic research at various times. The security model looks like how MILS Architecture systems were describes for servers combined with capability work. I also like that they&#x27;ve heard of and use PowerBox&#x27;s. :)<p>Worth watching or following up on later maybe.