Deterministic WebAssembly Sandbox | Dweve Selvedge

Selvedge runs untrusted code in a deterministic WebAssembly sandbox and returns a replayable run record. Publishing in the fourth release round.

Choose the audience that matches your question

The page contains three selectable readings of the same subject.

For consumers

Selvedge puts a program you did not choose in a room with no internet, no route to your files and nothing to learn about your machine. It leaves a receipt saying what came back and what the program was allowed to do, so you can check a later claim instead of taking somebody's word for it.

For businesses

Selvedge is a deterministic WebAssembly sandbox for untrusted code. Its permission manifest and sealed transcript run on hardware you control, so a counterparty can replay the record on its own machine and a dispute becomes a lookup rather than an assurance request.

For engineers

Selvedge runs code you did not write in a WebAssembly component host with no network, filesystem, environment or moving clock. Every completed run returns a record another party can replay, and an execution report stating what the code was allowed to do. Published under Apache 2.0.