Permissions and Sandbox Model

Deno runs code with no ambient authority: network, file, and environment access are each granted explicitly at launch or prompted for at runtime. Interviewers ask how that changes the supply-chain story compared with a Node process that can do anything its user can.