It should be possible to define a private [namespace] such that no external references to [variable]s are possible, and no invocation of namespace-local [proc]s are possible except via [namespace export]ed names. This would provide a nice degree of encapsulation, perhaps even a cheap [sandbox] and would be easy to implement. Implementation: I suggest a form of name of namespace which can't be present in a variable or proc invocation. This means an explicit namespace-path can't be constructed. -- [CMcC] 20 Mar 2005 ----