in that case we need a block of system memory marked as unsafe so i can run these programs in it encapsulated
perhaps we could call it a sedimentchest?
I think that’s just called “memory”. Encapsulation is your machine.
See xkcd's sandboxing cycle. They exist, they're called processes
I think that’s just called “memory”. Encapsulation is your machine.