On 10/31/07, Rob Withers <reefedjib at yahoo.com> wrote:
>
> I am trying to ensure that objects in one Vat don't get directly manipulated
> by objects in other Processes.

I don't see this part as too difficult, since you can't modify what
you can't get a reference to.  But the issue is mutable globals.  The
most obvious example here are class side variables: if multiple vats
can see the same class and that class has class side variables that it
mutates, then that's an issue.