Jo's two-world architecture to solve the fine-grained sandboxing problem at compile-time — PLINKFEED