... [the sandbox API] makes the full feature set of the init component available to C++ programs, including the hosting of an arbitrary number of children, the routing of sessions among them, the balancing of resources, and dynamic reconfiguration. In addition to the hosting of components, the sandbox API also allows the program to interact with the sandboxed children by providing locally implemented services.
-- Component management - Genode OS Framework Foundations