Chess engine sandboxing

[TheExpandingPolytope]

Description:
Chess engine bytecode execution must be sandboxed from the rest of the application state to prevent exploits. Each chess engine will have access to its sown partitioned filesystem and execution environment to support NNUES, Syzgy tablebases, or other file based optimizations. Each chess engine will implement the uci protocol. Which uses stdin and stdout for communication.

Software that can potentially help in this endeavor:

• https://docs.flatpak.org/en/latest/introduction.html
• https://firejail.wordpress.com/