WWW Security FAQ

These people address a real security problem that is different from what we address. I have no idea if they succeed.

NaCl

root;
Section 3 of “Native Client: A Sandbox for Portable, Untrusted x86 Native Code” tells how the NaCl inner sandbox works.
NaCl Life; Life in JavaScript