After the baseline verified runtime is completed, we will implement some optimizations and show that these optimizations preserve our safety properties. I will list out some potential optimizations as I think of them.
- For system calls that use a mutable buffer (i.e., write), let the os copy data directly into the sandbox.
- Use mmap instead of vector initialization to set up sandbox memory (faster startup).