Wasm is sandboxed, but it is not memory-safe inside its own linear memory. A compiled demo of an overflow that silently corrupts a neighbor, and where the real risk lives.