@chjara pledge is very hard to use when your entire app+dependencies codebase (incl. libc) isn’t in one repositorydo you know which glibc functions open random magic files in /proc? I sure don’t