Preliminary Observations
PLAN has many desirable properties
- trades expressive power for increased security
- amenable to formal verification
current implementation of PLAN environment poses some limitations for this application
- non-PLAN packets can only be accessed read-only
- can’t change non-PLAN packet’s route or content
- performance issues if every packet could be fully manipulated by PLAN programs