BoxFort provides an API to run user code in isolated processes.
Although BoxFort provides some kind of security of the parent process against spawned sandboxes, a sandbox has by default the same system permissions and access than its parent, and is hence, without care, ill-fitted for security purposes.
The goal of this project is portable code isolation (not security). For complete system isolation, consider using containers.