[JamyDev]

I definitely like this system of applying policies. Would like to see more than http though, like being able to set policies on execution time (e.g.: avoiding a RegEx DoS), filesystem access (e.g.: logger middleware can only write to /var/log/app), module access (e.g.: code that handles sensitive info like passwords can only load trusted modules), etc

Is this the future goal for the project or is it more of a PoC?

[bengl]

While we've started with outbound fetch/HTTP, we certainly plan on adding additional functionality over time.