Software fault isolation

A technique for running untrusted or legacy code safely in-process by instrumenting its memory and control-flow accesses so faults cannot escape a bounded sandbox region — the isolation model that underlies WebAssembly's in-browser safety.

grounded in: Latest-trends theme 'WebAssembly running heavy apps in-browser' plus the notable item 'Firefox in WebAssembly: a full web browser compiled to and running inside WASM' (2026-07-16 HN front page)