A note on the confinement problem
Butler Lampson · Communications of the ACM · 1973
onfining a program during its execution so that it cannot transmit information to any other program except its caller. A set of examples attempts to stake out the boundaries of the problem. Necessary conditions for a solution are stated and informally justified.