A system for intra-block workload isolation, said system comprising: a processor block ; a memory : a virtual machine manager, VMM, circuitry ; and at least one operational block , wherein: the VMM circuitry is configured to create a secure virtualization environment, sandbox, in the memory; the processor block is configured to load data into a first memory region of said sandbox, and to generate a workload package associated with a workload, wherein said workload package is generated based on said data and includes instructions suitable for execution by an engine of the at least one operational block, and wherein said workload package is stored in a second memory region of said sandbox; and the at least one operational block is configured to fetch and execute said instructions from the workload package from the sandbox, wherein the sandbox is isolated from other operations executable on the at least one operational block by preventing access to the sandbox by other code executing on the at least one operational block a processor block ; a memory : a virtual machine manager, VMM, circuitry ; and at least one operational block , wherein: the VMM circuitry is configured to create a secure virtualization environment, sandbox, in the memory; the processor block is configured to load data into a first memory region of said sandbox, and to generate a workload package associated with a workload, wherein said workload package is generated based on said data and includes instructions suitable for execution by an engine of the at least one operational block, and wherein said workload package is stored in a second memory region of said sandbox; and the at least one operational block is configured to fetch and execute said instructions from the workload package from the sandbox, wherein the sandbox is isolated from other operations executable on the at least one operational block by preventing access to the sandbox by other code executing on the at least one operational block a virtual machine manager, VMM, circuitry ; and at least one operational block , wherein: the VMM circuitry is configured to create a secure virtualization environment, sandbox, in the memory; the processor block is configured to load data into a first memory region of said sandbox, and to generate a workload package associated with a workload, wherein said workload package is generated based on said data and includes instructions suitable for execution by an engine of the at least one operational block, and wherein said workload package is stored in a second memory region of said sandbox; and the at least one operational block is configured to fetch and execute said instructions from the workload package from the sandbox, wherein the sandbox is isolated from other operations executable on the at least one operational block by preventing access to the sandbox by other code executing on the at least one operational block the VMM circuitry is configured to create a secure virtualization environment, sandbox, in the memory; the processor block is configured to load data into a first memory region of said sandbox, and to generate a workload package associated with a workload, wherein said workload package is generated based on said data and includes instructions suitable for execution by an engine of the at least one operational block, and wherein said workload package is stored in a second memory region of said sandbox; and the at least one operational block is configured to fetch and execute said instructions from the workload package from the sandbox, wherein the sandbox is isolated from other operations executable on the at least one operational block by preventing access to the sandbox by other code executing on the at least one operational block <EOS>