Interesting project.

As an aside, Tcl has had the ability to create sandboxed sub-interpreters whose calls can be intercepted for a long time now. http://www.tcl.tk/man/tcl8.5/TclCmd/interp.htm

Note that this is different from Python's Process module. There is no new process or even thread. Everything happens within one process.