chs.us — Carl Sampsonhttps://chs.us/en-uscarl.sampson@gmail.com (Carl Sampson)carl.sampson@gmail.com (Carl Sampson)Wed, 15 Jul 2026 12:00:00 +0000Six layers to sandbox untrusted Python — and the escape I missedhttps://chs.us/2026/07/sandboxing-untrusted-python/Wed, 15 Jul 2026 12:00:00 +0000carl.sampson@gmail.com (Carl Sampson)https://chs.us/2026/07/sandboxing-untrusted-python/Letting users run their own Python to shape your server's responses means executing untrusted code in production. Here are the six independent layers that contain it, why each exists, and the AST-bypass that slipped through all the early ones.SecuritySandboxPythonSeccompLandlockAppsecOast