Explanation

Why the defaults are what they are. Read the isolation tiers page before running untrusted code.

Page	Question it answers
Isolation tiers	What a container does and does not protect you from, and what the floor is for untrusted code
Deny by default	Why egress is off, and what that costs
Why errors have codes	Why every failure carries a stable SBX_E code and a hint that is a fix
Version policy	What counts as a breaking change, how long a deprecation lives, and why .native is exempt