Background: removed the sentence about trusted stack being beyond the scope
Implementation: diagram of a sandboxed library