Reimagining Bash for Untrusted Contexts
capsulerun.github.io