Nice!

1, track napplet/naps. 2. If you haven't already, consider developing a malicious napplet that does things like envelope floods, mass-deletions and list overwrites, among other things, to ensure your protect the user.

Any update?

Sorry, from what? I am still refining the sandbox for nsites + napplets + webapps on Amethyst... Its almost there.. They will run in a separate OS process, so they cannot see anything from Amethyst, including memory/disk. I still need to design a good permission system for signers though.