Sharing another V8 Sandbox design document more widely: docs.google.com/document/d/1CP…
This one discusses how to protect code pointers - probably the most performance sensitive part touched by the sandbox - with (almost) no performance overhead.