Conversation

bad news everyone: your purely functional and capability-safe program is running on top of a side effect'y stateful world

the correct way to solve this problem is to generate new single use self-contained purely functional universes and do message passing between them, and corrupt the fabric of time between the message passing substrate in such a way that timing and other such side channel attacks are not possible