title: How does Google App Engine sandbox work?
body: <p>How does Google App Engine sandbox work? </p>
  
  <p>What would I have to do to create my own such sandbox (to safely allow my clients to run their apps on my engine without giving them the ability to format my disk drive)?  Is it just class loader magic, byte manipulation or something?</p>