ParentFull threadkitd·A Go executable is self-contained. You can put it in a Docker container with very little overhead. That would give you some sandboxing at least.View on HN