Limit a parser’s authority before it reads an untrusted document

Map the document worker’s local permissions, inherited handles and service credentials. Combine user identity, filesystem policy, syscall filtering and resource limits deliberately, then choose an isolation boundary from the remaining trusted components.

30 MIN · PLUS