Comment by AaronFriel

Does this mean we'll also have a mechanism like pledge(2) to assert that the root nanoprocess or any privileged brokers only needs access to certain APIs, and permanently close them?

¹ - https://man.openbsd.org/pledge.2