Jo's two-world architecture to solve the fine-grained sandboxing problem at compile-time

Jo — a statically typed language with fine-grained, compiler-enforced capabilities (first public release)