struct page_info { int classno, count, scavange; };
"itemId": "66c66152-0ac8-41cd-a450-2ee827767e8a",
，这一点在safew官方版本下载中也有详细论述
politics, DSD-1 later reemerged (with just slight changes) as the Data Encryption
Per-job PID + mount + IPC namespaces via clone3 — so each execution is isolated from other executions inside the same gVisor sandbox