Custom app sandboxing

Caution

For the initial releases of panorama, I am not planning on including any sandboxing whatsoever. The development overhead will be far too great to warrant supporting it.

The entire app will be rewritten before the public alpha release, which will include proper custom app sandboxing. This page lists some ideas.

Custom apps are made up of two parts:

• The backend, which talks to the database
• The frontend, which talks to the user

I say “the” frontend, but there could possibly be multiple frontends. (TUI, headless, etc.) Each part needs to be sandboxed individually.

Backend sandboxing

This will be done via a WASM runtime. The custom app’s backend software will

Frontend sandboxing

lmao not sure if this is possible with a web-based host at all, looking into flutter…