| 10:02 | <naugtur> | This feels similar to some of what I intended to do around attenuations for policy in Endo, but at this time I don't see much potential overlap for actual implementation because of where the translators and attenuators need to be plugged in. I could also imagine a way to use attenuations to give translated modules access to different dependencies dependeing on a situation, but it's probably an example of "when you have a hammer..." Anyway, with a separate compartment you get a separate policy so if "a module that executes in a corresponding compartment with access to the translator’s prod dependencies" is a requirement, current draft implementation of policies would allow that. |