[pypy-dev] Sandboxing questions

I have a couple questions about the sandboxing feature: - Currently this is a two-process model, but early on the assertion was made that this could be done in a single process, perhaps but not necessarily separated by two OS-level threads. Is this (still?) true? What would you need to invoke to create such a pypy? - How granular can the control on imported/run functions be? Can you have a full interpreter that does everything, or an interpreter that allows socket access and that is it? Thanks, Van