v8 isolates aren't actually a great sandbox and I would not trust them implicitly in the AI era. This is probably why they wrap them in an additional sandbox.
But I guess they are good enough to isolate multiple instances of the same code, ran by the same customer in parallel.
Why are v8 isolates bad, I see speculative execution hacks, but are there others?
But I guess they are good enough to isolate multiple instances of the same code, ran by the same customer in parallel.