A mruby sandbox running in its own sub process and having only a single pipe in and out to communicate with the outside. Provides a rather safe environment to run untrusted code.