Safety and Security
Dangerous/general Tcl primitives were replaced by more specific ones.
Aim: to protect the recipient’s computational environment.
Twin interpreter scheme, consisting of a trusted (Tcl) interpreter and an untrusted (Safe-Tcl) interpreter.