Hi, Guile 2.2 has a (ice-9 sandbox) module, documented at
https://www.gnu.org/software/guile/docs/docs-2.2/guile-ref/Sandboxed-Evaluation.html#index-make_002dsandbox_002dmodule Earlier Guile already had the (ice-9 safe) module, which provided a somewhat similar facility (which is also richer, as it allows imposing time and memory limits on execution). LilyPond currently uses (ice-9 safe) to implement its -dsafe mode. Is it deprecated? Should we move to (ice-9 sandbox)? Is there anything particular to be aware of in that transition that explains why (ice-9 safe) remains around? Thanks, Jean