NaCl questions

Answer any 3:

1. What the purpose of the inner sandbox? What guarantees does it provide and how does NaCl implement it?

2. What the purpose of the outer sandbox? What guarantees does it provide and how does NaCl implement it?

3. Why did NaCl take the approach of statically verifying that a piece of x86 is safe instead of providing a trusted compiler approach?

4. Why is it not possible to dynamically load a library with NaCl? What makes this hard to do?

5. Why does NaCl not support JITed language runtimes?