Programming language configuration
How the configuration value is dispatched into a director, an analyser and a weaving mechanism.
Class permission
How the derived ClassPermission set is built and how it reaches both enforcement layers.
File system access
How read, overwrite, execute and delete permissions are enforced by the architecture layer, the advice and Phobos.
Network system access
How connect, send and receive permissions are enforced in the JVM and by the LD_PRELOAD firewall.
Command system access
How permitted executables and arguments are enforced, and why this domain has no Phobos section.
Thread system access
How thread creation is enforced, and why Object monitor methods need call-site rewriting.
Package permission
How import restrictions are enforced, and why this domain is architecture-only.
Resource limits
How time and memory budgets are generated, which mechanism enforces them, and which one does not.