Brief

An isolate is not a host boundary A V8 isolate or a NodeVM box can still leave the host process writable. There is no single AI kill switch

Description read from the page itself, because the listing it was found in gave none.