pledge.com is a tool for sandboxing CLI commands on Linux that doesn't require root privileges. It's based on the Cosmopolitan Libc polyfills for the OpenBSD pledge() and unveil() functions which we've implemented using SECCOMP BPF and Landlock LSM.

• Fix thread killing semantics #628
• Fix interop with Go DNS #627