This is a companion map to my Building ShrekOS series. If you have read Part 2 , you have the argument already. This post is the picture: how an untrusted workload gets to do real work while reaching almost nothing.
Source: [Dev.to](https://dev.to/the_leon_odor/shrekos-in-two-diagrams-giving-an-agent-exactly-one-folder-and-one-hostname-d11)