@wingo Wait, couldn’t you compile LLVM itself to WASM, compile the WASM to C with Wastrel, then any compile time code execution in LLVM is inside the WASM sandbox too?
I realize that ‘get Wastrel to the point of being able to compile and run LLVM’ may itself be a tall order 😅