Whether a QuickJS teardown has ever aborted a WASM module in this process (#1922).
Latched and never cleared — it is a diagnostic, not a health check. It does
not mean scripting is broken: the poisoned module is retired at the
moment of the abort and the next sandbox gets a fresh one, so a true here
is compatible with a fully working sandbox. A host wanting to know whether a
particular sandbox is still trustworthy should read Sandbox.moduleRetired
instead; this is for telemetry and for explaining a script that crashed.
@ifc-lite/sandbox — QuickJS-in-WASM sandboxed script execution
Runs user scripts in a secure, isolated environment with only the
bim.*API exposed. No DOM, no globalfetch. Outbound HTTP is available only throughbim.network.fetch, gated by thenetworkpermission (off by default) plus an exact-host grant list re-checked on every call — seenetwork-request.tsandbridge-network.ts.Example