Here's how a protection test works. The microcode feeds three things to the Test PLA:
The Writer is not a concrete class. Any object that implements write(), end(), and abort() can be a writer making it easy to adapt existing APIs or create specialized implementations without subclassing. There's no complex UnderlyingSink protocol with start(), write(), close(), and abort() callbacks that must coordinate through a controller whose lifecycle and state are independent of the WritableStream it is bound to.
。关于这个话题，safew官方版本下载提供了深入分析
Credit: Amazon MGM Studios
security framework rather than implemented in a separate runtime layer.