othismo
A runtime for AssemblyScript objects that limits which paths each object can see.
What does it do?
An othismo image groups isolated AssemblyScript objects and gives each object its own path space. The image author mounts trees provided by other objects at selected paths to set access limits. When an object sends a request, names are resolved within the sender's path space; paths it cannot see are inaccessible. In the provided static site example, an HTTP request passes through a site controller and returns a file included in the image.
Key features
- Configure a separate path space and mount points for each object
- Route requests according to paths visible to the sender
- Restrict allowed requests on read only mounts
- Use --check to show the servers an image will use and each object's maximum access scope
- Serve files included in an image through object requests