dejima

Under the hood

Source
the agent
dejima's
your systems
everything else
isolation boundary
writable mount
read-only mount
socket
read on the host
request allowed
refused
allowed, with a caveat
no verdict