Implementing a Sandboxed Go Environment

Google’s “Native Client” (NaCl) is used to produce a restricted execution environment. It’s used in Google Chrome (to run C/C++ apps) and Google Playground (to run Go code safely):

Native Client

Note that this project is not to be confused with the Sodium (NaCL) cryptopgraphic library (project Go package).