Griotte: Verified Compartmentalisation via Capabilities
The episode discusses the paper "Griotte: Verified Compartmentalisation via Capabilities," which presents a framework for safely running untrusted code. The hosts explain how this system uses hardware capabilities and logical separation, enforced by a 'Switcher' and 'no-capture,' to ensure components cannot affect each other's integrity.