a restricted code execution framework