Context lookup security

[jbenet]

Would be nice if variables defaulted to unexposed (unreadable from higher contexts) and could be optionally exposed

[BrendanBenshoof]

Honestly the higher-context lookups are a philosophical remnant of another stack-based language I was working on. It has some utility but is not really needed. A "globals" memory could be useful for configuration, but im not sure that fits the use case.

[jbenet]

i think reaching into higher scopes works well in practice (js). it should just be an explicit permission. though this does grant the permission to any lower scope regardless of intermediate scopes.

another alternative, which is perhaps the right thing to do is to bind "parameters" before a call and only those variables are accessible.

PARAM    key, value   stores value at key for next child call only.